DDoS Attack Logs and History Viewing Complete Guide

Introduction

REXE Technology provides comprehensive attack logs through the Path Panel. You can view, filter, and analyze all DDoS attacks targeting your server in detail.

Access attack logs via Path Panel → Attack History menu.

Attack History Page

All detected DDoS attacks are listed in a table:

Column	Description
Target IP	IP address targeted by the attack
Reason	Attack type and trigger reason
Detail	Attack vector and protocol details
Peak BPS	Highest bandwidth of the attack (Bits Per Second)
Peak PPS	Highest packet rate of the attack (Packets Per Second)
Start	Attack start date and time
End	Attack end date and time

Filtering Options

Two filtering options are available to narrow down attack history:

Date Range Filter

Select start and end dates to view attacks within a specific period:

Start: 2024-01-01
End: 2024-01-31
→ All attacks in January 2024 are listed

IP Filter

Select or enter an IP address to filter attacks targeting a specific IP.

If you have multiple IP addresses, use the IP filter to review each IP's attack history separately.

Attack Details

Peak BPS (Bits Per Second)

The highest bandwidth value of the attack. This value shows the volumetric scale:

Value	Classification
< 1 Gbps	Small attack
1-10 Gbps	Medium attack
10-100 Gbps	Large attack
> 100 Gbps	Very large attack

Peak PPS (Packets Per Second)

The highest packet rate of the attack. High PPS values indicate attacks targeting server CPU.

Attack Duration

The difference between start and end times shows the total attack duration.

Automatic Updates

Attack data is automatically updated every 5 minutes. Refresh the page during an active attack to see current data.

Attack history only shows data for IP addresses assigned to you. Other customers' attack data is not visible.

API Access

If you have API access enabled, you can query attack history programmatically:

hljs bash

# Query attack history via API
curl -H "X-API-Key: YOUR_API_KEY" \
  https://panel.rexe.tr/external/attack-history

Dashboard Statistics

The Dashboard displays summary statistics of attack logs:

Attacks in Last 15 Days: Total number of detected attacks
Highest BPS: Largest recorded bandwidth attack
Highest PPS: Highest recorded packet rate
Top 10 Attacked IPs: Most frequently targeted IP addresses

Analyzing Attack Logs

Attack logs help you understand attack patterns targeting your server:

Repeated Attacks

If you see frequent attacks on the same IP, it indicates that IP is specifically targeted. In this case:

Review the attack type (Reason column)
Analyze the attack vector (Detail column)
Ensure your filter rules are optimized for this attack type
Contact our support team if needed

Attack Size Assessment

Evaluate Peak BPS and Peak PPS values together:

High BPS + Low PPS: Volumetric attack (UDP flood, amplification)
Low BPS + High PPS: CPU-targeted attack (SYN flood, small packet flood)
High BPS + High PPS: Mixed attack

Regularly reviewing attack logs helps you understand attack patterns and optimize your protection strategy accordingly.

Learning from Attack Logs

Attack logs don't just show historical data — they help you prepare for future attacks:

Attack Timing Analysis

Analyze which hours attacks are most concentrated:

Midnight attacks: Automated botnet attacks
Business hour attacks: May be competitor-sourced
Weekend attacks: Common for game servers

Attack Vector Tracking

Track the attack vector information in the Detail column:

Vector	Description	Recommended Action
UDP Flood	High-volume UDP packets	Optimize UDP filter
SYN Flood	TCP connection request flood	Use TCP Symmetric filter
DNS Amplification	DNS server amplification	Source IP filtering
NTP Amplification	NTP server amplification	UDP rate limiting

Attack Size Trend

Monitor changes in attack size over time. Increasing attack sizes may indicate your server is being targeted more frequently.

Review your attack logs regularly and share any unusual patterns with our support team. This information helps optimize your protection strategy.

Conclusion

REXE Path Panel's attack log system provides complete visibility into DDoS attacks targeting your server. By regularly reviewing attack history, filtering by date and IP, and analyzing Peak BPS/PPS values, you can understand attack patterns and optimize your protection strategy.

For real-time attack monitoring, use the Dashboard's hourly timeline. For detailed analysis, use the Attack History page with date range and IP filters. If you have API access, you can build custom monitoring and alerting systems using the attack history endpoint.

For more information about DDoS protection, see our Path Panel guide or null route policy.