will try to have IIS back up within 10 minutes, there are a multitude of attacking IPs on the shared IP. I am blocking them one at a time, with IIS running it is generating logs so quickly it is slowing the server.
I have started IIS again but it may have to go down again to continue blocking, I have blocked the top 10 source but 30 of them are very major, working to get all blocked
We found what they were attacking in logs after some personal analysis, it was a site on a DEDICATED ip but in the shared app pool, and it is down now, but the rest of the server is back 100% and only that domain is down.
