Suspect ddos attack? Check the current connections

This command displays current IP connections to the tcp/udp service.

netstat -an | grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n