This HRU is getting ridiculous

[Linkz0rs]

First of all, I don't need an explanation of how HRU (High Resource Usage) works, I know perfectly well. I also know what x10's own limits are set to.
I am also experienced enough in computers, technology, and networking to know that a DDOS can severely affect this.

My site has continuously been under a DDOS attack for the past week, and I have gotten several "HRU Limit Hit" message. This is getting ridiculous.
Why doesn't x10 have DDOS Mitigation?

I know very well I do not have any scripts on my site that could be causing this, as all I run is MyBB with no plugins installed. I don't have any automatic scripts, or any type of cron, or anything that can be causing this.

The only possible issue I see is a DDOS.

 

[Livewire]

I've got an inquiry open on this one with admins mostly because I'm looking at the server and I don't see any evidence of a DDoS occurring and haven't seen any evidence of one for several weeks.

I -do- see a chat script being called fairly often however, and if you check your 1H HTTP CPU Usage Stats in cpanel you'll notice that could easily be where it's coming from. There's a lot of hits that are using a fair amount of cpu to run, which is likely how it's hitting the hourly limit for CPU and thus causing it to be restricted.

 

[Livewire]

Admins have confirmed there is no DDoS occurring on Boru; the problem is a script of yours. After looking closer at the chat script itself I'm betting that's the cause as it runs five (my counting might be off there) mysql queries every time someone loads that particular file. Some of those queries wouldn't need to be ran each time either, but that's something to take up with the dev for the chat script. It certainly doesn't appear to be an optimized script which would -easily- cause you to hit the limits.

 

[Linkz0rs]

I don't even personally use the script, it was used as a test a while back.
If someone's using it though, I can lockout access from it.

Those status things on my account doesn't show any data for me, they all show "No Data", a way to fix this?

On another note, why did x10 remove the collection of visitor reports?
If I had something like that, I could have seen what people were doing on my site.

 

[Livewire]

The visitor logs were removed cause they were actually slowing the servers down drastically; not sure how to fix the 1H problem. I can tell you it's definitely the chat script though, it's popping up in the access log a fair amount. That said, I'm not sure -who- is actually accessing it, might just be googlebot or yahoo slurp or any of the other searchbots.