A website of mine is being attacked by some IPs. I don't even know if it was a ddos yet, I only know that it has been filling my application's logs for longer than a day, and then the server crashed due to mysql memory usage I guess (I received an automatic email from webmin saying that mysql went down)
I have access to Iptables, but I'm not sure if I want it to get filled of blocked ips.
I just wanted to know what is the most common practice in this scenario, I'm relatively new to server administration.
I'm using linux Centos, Apache, Php, and MySQL