AFF sent 250% more hits last night than I got from legitimate traffic. Somebody also hammered the pay site (can't prove who this was yet).
Over 64000 attempts to crack the ftp, ssh, and the member's area.
As far as we can see, no breaches but the fuckers killed my bandwidth and slammed the server.
We've implemented security procedures to reduce the impact on the server but I still have a bunch of work ahead of me.
As an added note: A few affiliates had passwords on the pay-site(s) with weak passwords - I'll be changing (or have changed) those passwords. Our auto-enroll password system is pretty FN good but a few of the ones I loaded manually are not cryptic enough for my linking.
|