NHP XDP attack stats
Daily summaries of [NHP-DROP] events from the XDP ingress filter on nhp-server.
Days are UTC. Click a row to open the detail page.
Source IPs on the detail pages are truncated to a.b.c.x (IPv4) and the first 48 bits (IPv6).
tcp/22 scans never reach the host's NIC and are not counted. During deploys or restarts the XDP filter is detached and the gap shows as missing minutes, not as zero attacks.
Daily index
| Day (UTC) | Source | DROP packets (exact) | Share | Unique sources | Top category | Peak hour | Flags |
|---|---|---|---|---|---|---|---|
| 2026-10-20 | server | 16562 | 39.67% | 4947 | TCP SYN scan | 2026-10-20 00:00 | partialrestart |
| 2026-10-19 | server | 385531 | 91.48% | 6112 | TCP SYN scan | 2026-10-19 16:00 | — |
| 2026-10-18 | server | 28456 | 44.00% | 5508 | TCP SYN scan | 2026-10-18 22:00 | — |
| 2026-10-17 | server | 24092 | 38.06% | 5284 | TCP SYN scan | 2026-10-17 19:00 | — |
| 2026-10-16 | server | 89910 | 66.61% | 7336 | TCP SYN scan | 2026-10-16 18:00 | restart |
| 2026-10-15 | server | 4 | 0.01% | 4 | Short UDP (below NHP minimum frame) | 2026-10-15 10:00 | — |
| 2026-10-14 | server | 15 | 0.04% | 11 | TCP scan / probe | 2026-10-14 01:00 | — |
| 2026-10-13 | server | 7 | 0.02% | 5 | TCP scan / probe | 2026-10-13 03:00 | restart |
| 2026-10-12 | server | 2 | 0.01% | 2 | Short UDP (below NHP minimum frame) | 2026-10-12 11:00 | — |
| 2026-10-11 | server | 10 | 0.03% | 7 | TCP scan / probe | 2026-10-11 17:00 | — |
| 2026-10-10 | server | 3 | 0.01% | 3 | Short UDP (below NHP minimum frame) | 2026-10-10 09:00 | — |
| 2026-10-09 | server | 6 | 0.02% | 6 | TCP scan / probe | 2026-10-09 08:00 | — |
| 2026-10-08 | server | 11 | 0.03% | 9 | Short UDP (below NHP minimum frame) | 2026-10-08 10:00 | restart |
| 2026-10-07 | server | 1 | 0.00% | 0 | TCP scan / probe | 2026-10-07 11:00 | — |
| 2026-10-06 | server | 5 | 0.01% | 4 | TCP scan / probe | 2026-10-06 23:00 | — |