L2J Server

What's the best way to check if someone is DDoS'ing your server on Windows Server 2003 ?

checking active connections.

Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ThePhoenixBird wrote:Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

momo61 wrote:

ThePhoenixBird wrote:Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

There's a number of ways to do it with phx. Item drop, item delete, and I'm sure a few ways I don't know yet.

toastgodsupreme wrote:

momo61 wrote:

ThePhoenixBird wrote:Check IIS/Apache logs and see connections if you see several connections from the same IP that would be a attacker machine.

Normally DDoS uses thousands of computers making attacks

ok. since there was this guy who was somehow lagging the server. I thought it was DDoS first, but apparently he used PHX in some way.

There's a number of ways to do it with phx. Item drop, item delete, and I'm sure a few ways I don't know yet.

Subclass changing (good thing i activated subclass flood protector)

it's redoncilous ^^ (redicilous)