To check if your server is getting DDoS, you can use netstat command.
1 |
netstat -anp | grep 'tcp' | awk '{print $5}' | cut -d: -f1 | sort| uniq -c | sort -n |
Once you find offending IP address, you can block it in firewall or using routing table.