I have a VPS with Ubuntu. I host a small website (~10 visitors at the same time). Sometimes the website starts lagging. It lags so bad that my SSH connection starts lagging too. Running
top says that 2 instances of
apache2 take up 50% CPU each.
I assume this is a
DoS attack. I've copy-paste installed a few
iptables scripts that made sense, but this has not helped.
libapache2-mod-evasive -- I'm sure it blocks the attacker, but I'm still lagging.
What can I do? Can I at least find the IP of the attacker?
I have strong experience with Linux, but almost zero experience with being a server admin.