Find out the source of a ddos ​​attack?

Question

DDoS Protection

I ordered a small vdsocket on the hetzner website, put my old snapshot with game servers (rust) on it, but there was a problem, a huge flow of requests is coming from my server somewhere in China, presumably, there was a DDoS attack from my host, as a result of which my host banned.
This situation happened 2 times, I downloaded the entire snapshot to my computer.
How can you find by logs or search which program made requests, find it and delete it.
There is still 1 possibility, Rust servers accept plugins in the format. cs (c# source)
it is possible that a similar mechanism is wired there.
Thanks in advance for your reply.

Answer 1

This situation happened 2 times, I downloaded the entire snapshot to my computer.
How can you find by logs or search which program made requests, find it and delete it.

Run on your computer and scan wireshark for example.