Tamal wrote:*skeptical face*
Sure our forums might have been using more resources than they liked, but was it *really* a DoS?
They didn't really give any opinion to what it was, just that we were overloading the server. I'm pretty sure it was an attack.
in 3 periods each of around a minute between 3.15 and 3.25pm, one ip made 18396 access attempts, all to resource intensive links - trying to create an account, log out and in with that account, post on the same topic over and over, do a forum search etc... There's a lot of entries to search through, but as of now I'm fairly certain it never managed to log in or create an account and didn't try logging in as anyone else, it was a denial of service attack rather than an attempt to gain access to anything it shouldnt.
It seems the same ip made a smaller attempt earlier in the day so we have some forum logs of failed log in attempts. but the backup is before the attack so we only have server logs to go off of.
I don't have an issue that they took us offline, although as it was only one ip i'm surprised they didn't auto-ban the ip somewhere along the line, although the host wasnt the best technically, they did have consistently fast servers and very fast customer service response times, I will be sad to lose that speed, although atm the forums seem nice and fast. The only reason i moved is they reactivated my account but koa is still suspended on that account, I wanted to get us online asap. Also I had this server sitting waiting for us to move in the future anyway, so it seemed a good point to do it (it should be far more protected against anything like this where we are now).
]
(Magerpainz)
