There are a few telltale signs of being DDoSed. You’ll notice that your server slows down and responds with a 503 due to service outage. The TTL (time to live) on a ping request could time out, or, if you use the same connection for internal software, your employees could notice speed issues. Log analysis solutions could also show a huge spike in traffic, indicating that not all traffic is organic.