Hello. I’m running a server in the pool, and it’s mostly a quiet place. But 3 to 4 days ago I started getting a coinsiderably high amount of requests from one host: 18:39:39.642792 IP (tos 0x10, ttl 59, id 33756, offset 0, flags [DF], proto UDP (17), length 76) 78.26.151.96.33417 > 37.57.97.11…

This is probably a different broken client. It looks like systemd-timesyncd. It has a bug causing requests to be sent in an infinite loop. The rate depends on the hardware. On my servers I see this every few weeks. You can confirm it’s timesyncd by looking at the sequence of its transmit timestamps…

Uncommon load question: many packets from one IP

Server operators

stevesommars October 8, 2021, 4:41pm 4

See the details I posted.

What is the cause of the demand spikes?

NTP bursts from FortiGate firewalls

Topic		Replies	Views
NTP bursts from FortiGate firewalls	14	3175	November 23, 2021
Are you seeing high rate, sustained NTP bursts coming from one IP address Server operators	0	643	February 7, 2024
Number of concurent connections Server operators	7	2479	February 19, 2018
Spikes in traffic the past couple days? Server operators	3	905	September 26, 2018
What is the cause of the demand spikes? Server operators	7	829	June 11, 2022

Uncommon load question: many packets from one IP

Related topics