vBulletin 3.8.3 Exploit?
 

Hi

Yesterday my hosting company [servage.net] suspended my account due to the forum/misc.php taking over 2.5 million hits and putting undue load on the shared server.

It's a small forum [under 70 members], and pretty quiet, and ONY visible to the to Registered Members. Registration is closed, so all anyone will see is the login page.

I have the CYB - Advanced Forum Rules and CYB - Chatbox[only accessable by the 4 Moderators], and CYB Advanced Statistics installed which refreshes every 30 secs, but surely that wouldn't generate over 2.5 million hits in 10 hours?

From talking to some other vBulletin users I've been informed that this may be some form of attack called "teardropping"?

Now, the hosting company are being a real PITA & refuse to re-instate my account till I take the necessary action [according to them change the problem with the misc.php script!]

However, I cant do anything because they've locked out my ftp access as well!

I've asked over at vbulletin .org & was advised to ask here as well

Anyone got any ideas/suggestions as to what may have caused the HUGE amount of hits on the misc.php & how to solve it?

TIA