further to my previous post, it appears much of my ISP's IP range has been under some sustained pressure/attack from somewhere. Yesterday morning this website, and all others hosted on its server, went south. It appears (for the moment) that something has killed off TCP access to one of my IP addresses, though UDP seems to work. Luckily I have multiple IPs and could shift to a secondary, though some sites hosted on the box may still have issues.
On examining the security logs for the period, I have something like 50,000 failed login attempts from an 0wned machine (or machines) somewhere, and my ISP's datacenter honchos have also mentioned massive traffic pressure from what are likely to be bots.
Not fun. not fun at all.
posted @ Wednesday, October 18, 2006 10:01 AM