I know it's a bit late in getting in here and explaining what was going on, but here goes.
CAD were the target for a very nasty multi pronged attack, thanks to Leyther for trying to kep the panic to a minimum and apologies to those that I couldn't contact.
Basically we had everything from DDoS, IRC bots, UDP floods, SPAM mailers, self replicating hacks, you name it. All in through one or two vulnerable scripts.
I was personally at it for 72 hours straight (bar a couple of passing out episodeds) to save what we could, we had to disconnect the backup drive to avoid damage to that and avoid taking any parts of it over on the regular backup.
The multiple attacking IP's used kept changing so simply adding them to iptables didn't work even for full subnets - many thanks to all those supplying and advertising annonymous proxies and gateways (sarcasm if you missed it).
The main shared server was at the end of the day trashed, and had to be rebuilt from scratch, and in the attackers infinate wisdom they didn't quit at that but kept an open port scan on the IP range of that server, and first chance in they went again.
I've posted elsewhere, but all the hack tools were simply ftp'd through shell from sites all hosted by home.ro. Through the vulnerability they managed to kill services and access shell access.
We spent all our time continiually finding and deleting components and have been working on ensuring this does not happen again ever since, so again apologies for the delays in an explaination as I know a lot of FWS members have joined us and so deserve an explination.
In almost 7 years we've had a share of outages for various reasons but none on this scale, and we hope it's the last.
Best Regards and thank you all for your patience (not a bad word has been said to us over this only enquiries and concern that all was okay, again thank you all for being so considerate)
All at Ctrl-Alt-Deli.com
Oh Tamranda - that was my home number you just gave out, which has been recently changed :shame: