If we find that our VPS server is abnormal, generally we can analyze it from the server logs to see if there is an IP source that does not follow the "rules". For example, we can use server log analysis tools: ngxtop and GoAccess to analyze the IP source, number of connections, error requests, browsers, traffic bandwidth, etc. in the statistical logs.