If you notice high load in your server or unresponsive services it might be you are suffering an ddos attack. If you want to have one snapshot of ips connected to your server, just type this command:
$ netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n