It doesn't look like an attack would have caused this when looking at the logs. It's more likely due to changes we made during the last server save (kernel update, a lot of tcp settings being fine tuned, and enabled the software firewall).
I might revert some of the changes at the next server save to see if it makes any difference, but I've been online since the last server save and haven't been kicked.