Skip to main content
The Attack logs page lists the DDoS attacks detected on your IP addresses, both ongoing and finished. Use it to check whether a problem with your server was caused by an attack, and how often your IP addresses are targeted.

Difficulty

Beginner

Time

3 minutes

​
Open the attack logs

In the sidebar, click Attack logs. You can also click Check attack logs on the Dashboard.
Attack logs page with Ongoing now, Total attacks and Average duration counters, status, severity and sort filters, a More filters button, a search box and the message No attacks recorded

The Attack logs page

The page refreshes itself every 30 seconds. The countdown next to the refresh icon shows when the next update is due. Click the refresh icon to update straight away.

​
Read the summary

If you see No attacks recorded, no DDoS attacks have been detected on your IP addresses. That’s good news.

​
Find a specific attack

Use the filters above the list to narrow it down.
1

Pick a status

Choose Ongoing to see only live attacks, or Ended for past ones.
2

Pick a severity

Choose a severity to focus on the biggest attacks first.
3

Narrow by date

Click More filters, then enter a start and end date.
When you contact support about an attack, include its Event ID and the IP address. It helps us find the attack quickly.

​
Read the attack list

Each row in the list is one attack.

​
Open an attack’s details

Click Details at the end of a row to open the Attack overview. How much you see depends on the provider that protects your IP.
You get a full breakdown of the attack.
Attack overview showing the Ended badge, target IP, Mbps, Pps and Duration, a world map of Attack sources, a Traffic mix chart and a Networks list of the top ASNs

Attack overview with sources, traffic mix and networks

Ports panel with Targeted and Source tabs, a Top source IPs list, and bar charts for Packet size in bytes and TTL

Ports, top source IPs, packet size and TTL

The Targeted ports tell you which service was attacked. If that port has no filter yet, add one.
Click Attack logs at the top to go back to the list.

​
What to do during an attack

Our protection works automatically, so most attacks are filtered without you doing anything. If your service is still affected:
1

Check your filters

Open the IP from My IP addresses and make sure there’s a filter or profile for every port your service uses.
2

Try a stricter filter

If attacks still get through, switch to a stricter version of your filter, such as FiveM (Ultra Strict) or a Strict or Challenge filter.
3

Block unwanted sources

If the attack comes from specific countries or networks, block them in IP settings.
4

Contact us

If your service is still down, open a ticket with the IP address, the time and the Event ID.

​
Get alerted automatically

You don’t need to keep this page open. Set up notifications to get a Discord, Slack or email message when an attack starts and ends.

​
Frequently asked questions

Not every slowdown is an attack. Check your server’s CPU and memory use in your game panel, and our status page for any network issues.
That means the protection is doing its job. Attack traffic is being filtered before it reaches your server.
Use More filters to choose a date range. If you need records from further back, open a ticket.
Yes. Create an API key with the attackLog view permission and use the API, or connect an AI tool with MCP.

Apply DDoS filters

Tighten protection on your ports.

Configure notifications

Get attack alerts in real time.

​
Need Extra Help?

If you encounter any issues, our support team is ready to assist:

​
Save on Your Hosting

Ready to upgrade your hosting? Use code KB20 at checkout for 20% off your first order!
Last Updated: October 2026