Help Center/ Anti-DDoS Service/ Best Practices/ Best Practices of Advanced Anti-DDoS/ Using AAD to Identify Attack Types
Updated on 2026-06-08 GMT+08:00
View PDF
Share

Using AAD to Identify Attack Types

Application Scenarios

DDoS attacks are launched towards services over layer 4 protocols. You can view the attack protection result on the DDoS Attack Protection tab on the AAD dashboard.

CC attacks are launched towards website services over layer 7 protocols. You can view the attack protection result on the CC Attack Protection tab on the AAD dashboard.

Resource and Cost Planning

Resource

Description

Quantity

Cost

AAD

Defends against DDoS attacks.

1

For details about AAD billing modes and standards, see Billing Overview.

Procedure

If both CC and DDoS attacks are launched, you can use the following methods to quickly identify the attack type:

  1. Log in to the AAD console.
  2. In the navigation pane on the left, choose Advanced Anti-DDoS > Dashboard. The Dashboard page is displayed.
  3. Click the DDoS Attack Protection tab.
  4. View the traffic reports respectively on the DDoS Attack Protection and CC Attack Protection pages and determine the attack types accordingly.

    Attack Type

    DDoS Attack Protection Report

    CC Attack Protection Report

    DDoS attacks
    • The report indicates attack traffic fluctuations.
    • Traffic scrubbing has been triggered.
    • There is no associated traffic fluctuation in the report.

    CC attacks
    • The report indicates attack traffic fluctuations.
    • Traffic scrubbing has been triggered.
    • There are associated traffic fluctuations in the report.