Discourse overloaded real traffic or DDOS? 100% CPU usage despite of decent traffic and high specs server

How do i make sure that it is indeed a DDOS attack on my site? or its just real genuine traffic growth?

First i need to find the real problem and then go towards the right solution.