password the server for sometime and spread passwords around on pm or not gonna word I'm not to educated in the DDos stuff
For a DDOS attack they do not need to be on server. We changed our IP, as that was the only option not to get in to trouble with traffic or bring the network itself down.
FYI: the last 7 days we used double the traffic that we use normally in one month. Without Sauron we would have been shut down or gotten a huge bill to pay.