DDoS – ServerOK

To check if your server is getting DDoS, you can use netstat command.

netstat -anp | grep 'tcp' | awk '{print $5}' | cut -d: -f1 | sort| uniq -c | sort -n

1	netstat -anp \| grep 'tcp' \| awk '{print $5}' \| cut -d: -f1 \| sort\| uniq -c \| sort -n

Once you find offending IP address, you can block it in firewall or using routing table.