This question already has an answer here:
- I am under DDoS. What can I do? 1 answer
someone is making many requests to a specific page on my site that has JS on it. Subsequently, it's driving the CPU load to 100+ if I don't restart apache.
What I tried: - Reduce KeepAlive timeout - Installed mod_evasive (doesn't seem to work due to MaxChildProcesses, basically it's installed and blacklisting IP's but I can still hit refresh 20 times and it wont block anything) - Installed DDOS DEFLATE (usless, CSF is better) - Configured CSF to protect port 80 and ban IPs with more than 50 connections (many false positives still doesn't prevent CPU spike) - Installed limitipconn only to find out it doesn't work at all with apache 2 - Enabled syn cookies and reduced various tcp timeouts - Optimized the site to make it less prune to DDOS attacks
Nothing really works and they can still crash my server whenever they want.