I have a dedicated server which I use for scraping lists with scrapebox, gsa ser and gsa proxy scraper. Two to three instances of scrapebox are being usually of which one for bing using public proxies scraped from gsa ps, one for google with public proxies, but used with very low amount of threads and another one with private proxies for google.
For the past few months I've noticed unusual downtime on this server. It will usually last for a couple of hours or sometimes minutes and then I can connect. It was not that much at first so I didn't care much, but lately it became more and more lasting. I decided to ask my host whats up with that and they told me their DDoS protection has shut down the internet to the server because of unusual activity. I asked them to look more closely why did the autoprotection turn on and they said that the logs said I was being DDoS attacked for sure.
So I was wondering who could do that, why and most importantly how did my server ip address leak? I use private proxies for gsa ser, and the public proxies I use for scrapebox are filtered with only elite ones. Any idea on what to do now? It seems I'm getting regular attacks like every day now.