Help Center/ Anti-DDoS Service/ FAQs/ CNAD Basic (Anti-DDoS) FAQs/ About Anti-DDoS/ How to Determine Whether an Attack Occurs?
Updated on 2025-08-20 GMT+08:00

How to Determine Whether an Attack Occurs?

To check whether a public IP address is attacked, perform the following operations:

Method 1: Viewing Monitoring Reports

  1. Log in to the AAD console.
  2. Click the Public IP Addresses tab, locate the row that contains the IP address of which you want to view its monitoring report, and click View Monitoring Report.

    Figure 1 Viewing a monitoring report

  3. Check whether there are attack traffic and anomaly events.

    • On the Traffic tab page, check whether there is attack traffic displayed in the corresponding time range. If there is, the public IP address is attacked.
    • Check whether there are abnormal events in the event list at the bottom. If there are abnormal events, the public IP address is attacked.
    Figure 2 Monitoring reports

Method 2: Viewing the Security Report

  1. Log in to the AAD console.
  2. Click the Security Report tab, select a time range, and check whether the queried public IP address is in Top 10 Attacked Public IP Addresses.

    If the public IP address is in Top 10 Attacked Public IP Addresses, the public IP address is attacked.

    Figure 3 Security report