My server got a 13 GBit DDoS attack so LeaseWeb nulled its IP address and the attack ended. My IP address is still blocked. I got a temporary second IP address, which is not yet public.
How can I detect the attack from my logs?
My server runs Windows Server 2008 R2.