DDoS check ?

[momo61]

What's the best way to check if someone is DDoS'ing your server on Windows Server 2003 ?

[MELERIX]

checking active connections.

[ThePhoenixBird]

Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

[momo61]

Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

[toastgodsupreme]

Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

There's a number of ways to do it with phx. Item drop, item delete, and I'm sure a few ways I don't know yet.

[momo61]

Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

There's a number of ways to do it with phx. Item drop, item delete, and I'm sure a few ways I don't know yet.

Subclass changing (good thing i activated subclass flood protector)

it's redoncilous ^^ (redicilous)