my server got attacked

hi everyone

it has been attacked since last week, and i have tried optimize and ban ips but it seems doesn't work. I got attacked every night
root@host [~]# netstat -n | grep :80 |wc -l
1141
root@host [~]# netstat -n | grep :80 |wc -l
1167
last night it was 2500 my server got attacked

For the morning:
root@host [~]# netstat -n | grep :80 |wc -l
756
root@host [~]# netstat -n | grep :80 |wc -l
645

i have apf,mod_security,mod_dos installed and

here is my my.cnf
[mysqld]
port = 3306
socket = /tmp/mysql.sock
skip-locking
key_buffer=48M
join_buffer=1M
record_buffer=1M
sort_buffer=2M
table_cache=1028
max_connections=300
thread_cache_size=286
max_allowed_packet=5M
connect_timeout=15
query_cache_limit=1M
query_cache_size=32M
query_cache_type=1
thread_concurrency=4

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash
safe-updates

[isamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[myisamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout
and my httpd.conf:
Timeout 5
KeepAlive Off
KeepAliveTimeout 5
MinSpareServers 8
MaxSpareServers 13
MaxRequestsPerChild 50
my server is dual Xeon 2.8ghz and 1GB ram. CentOS and cpanel. I have only 2 sites on this server, and around 300 members at peak time. I am so tired of this ddos.i have tried difference ways like add those ips to deny_hosts.rules (apf) but it doesn't help.Can anyone please help me this proplem ? thanks

p/s: update more info
22:15:19 up 10 days, 23:46, 1 user, load average: 63.50, 39.36, 19.82
924 processes: 922 sleeping, 1 running, 0 zombie, 1 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 0.0% 1.3% 2.1% 0.1% 1.0% 95.0% 0.0%
cpu00 0.0% 1.3% 2.1% 0.1% 0.7% 95.4% 0.0%
cpu01 0.1% 1.3% 2.1% 0.1% 1.3% 94.6% 0.0%
Mem: 1025208k av, 1007316k used, 17892k free, 0k shrd, 2900k buff
740424k actv, 137892k in_d, 12144k in_c
Swap: 2096472k av, 1543496k used, 552976k free 127072k cached

 

 

 

 

Top