Today, spammers have treid a distributed denial of service (DDOS) attack on Dragon Thoughts.

It appears the attack took two forms.

  1. Spamming possibly non-existant aol accounts with faked headers claiming to be from this domain, resulting in many hundreds of mail bounces from aol.com, which it repeats at regular intervals.
  2. Attempts to repeatedly flood posts to php scripts on the DragonThoughts contact forms on the web server. I think the idea was to generate fake mail, as blind carbon copies (bcc:) to appear to have come from DragonThoughts . I believe this attack failed, other than flooding logs with garbage.

Security has been stepped up, including banning all of the IP addresses (presumably compromised computers) from access to the entire site.

Details of the IP addresses involved