i use an application called portsentry made by psionic software logs to my syslog if im getting hammered it gets ip and server names quite a nifty little app and very easy to use and install