High load problem

[drc]

Hello,

My server inf,
Debian 11
Apache web server
Maria DB
DA version 1.657
I am using CFS/LFD and Modsec
This is shared web hosting server

Problem: Many different IP addresses appear to be attacking. But I cannot find the IP addresses in the domain logs. I see it on the Apache status page, but the target is not clear. There are plenty of -DFOREGROUND operations.

Where do these IP addresses attack?

My top screen,

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
706229 apache 20 0 208656 44096 580 R 37.5 1.1 9:33.71 /usr/sbin/httpd -DFOREGROUND
705965 apache 20 0 208468 44320 692 R 36.8 1.1 9:32.14 /usr/sbin/httpd -DFOREGROUND
706984 apache 20 0 208448 43832 384 R 36.8 1.1 9:33.19 /usr/sbin/httpd -DFOREGROUND
706188 apache 20 0 208432 44064 600 R 36.5 1.1 9:33.03 /usr/sbin/httpd -DFOREGROUND
706306 apache 20 0 208584 44044 516 R 35.5 1.1 9:33.54 /usr/sbin/httpd -DFOREGROUND
706285 apache 20 0 208440 43804 384 R 35.2 1.1 9:35.07 /usr/sbin/httpd -DFOREGROUND
706707 apache 20 0 208648 43840 408 R 35.2 1.1 9:32.99 /usr/sbin/httpd -DFOREGROUND

My netstat,

1 172.69.134.153
1 172.69.134.195
1 172.69.134.202
1 172.69.134.220
1 172.69.134.226
1 172.69.134.231
1 172.69.134.244
1 172.69.134.251
1 172.69.135.101
1 172.69.135.162
1 172.69.135.168
1 172.69.135.23
1 172.69.135.46
1 172.69.135.51
1 172.69.135.66
1 172.69.194.237
1 172.69.200.134
1 172.69.22.110
1 172.69.22.12
1 172.69.22.131
1 172.69.22.136
1 172.69.22.184
1 172.69.22.216
1 172.69.22.220
1 172.69.22.24
1 172.69.22.253
1 172.69.22.39
1 172.69.23.111
1 172.69.23.124

My apache status,

101-14	709608	0/1/6	R	0.00	1030	39	42884	0.0	0.00	0.01	172.71.154.153	http/1.1
102-14	709677	0/0/4	R	0.00	1029	0	77675	0.0	0.00	0.00	172.71.154.122	http/1.1
103-14	709680	0/2/5	R	0.02	989	3007	43189	0.0	0.00	0.01	172.71.155.27	http/1.1

110-14

710133

0/5/9

R

0.05

670

780

27041

0.0

0.11

0.11

172.69.134.251

http/1.1

111-14

710140

0/2/5

R

0.01

708

5

25668

0.0

0.01

0.01

172.71.158.229

http/1.1