All the attacks being tested Were Layer 7 based, GET, Head, Post and Form-Field Spam, Those requests are handled by the webserver, Getting rid of the account was necessary because it was posting on requests for free host booters and was giving away cracked software that could have been infected...