Well, the site was down for most of the day today due to what I assume is a DOS attack. It’s still going on, but has slown down a bit. There are about 6000 unique hosts that are hitting the site, all requesting a certain url that doesn’t exist. Possibly this is a mass email with a link to the site? Maybe someone has control of 6000 virus laden boxes. I’m not sure. Only about 3% of all requests for that page actually have referrers.
I thought about blocking every single IP address, but really that won’t do very much good, other than cause each host to time out, they would still be hitting my connection, they’ll just get dropped. I setup the requsted page with a 0 byte file, so they’re request is being filled.
Any suggestions? That’s all for now. I’ll update later if anything else happens.