Anyone see this type of DDoS?
 

Every minute it would send 50 guest connections to a thread and refresh, it was at 1600 guest and it was causing a slow down.

We remove the tread but the guest connections till come back. The only way so far was to rename the forums.

If we go back it starts over again.

Any ideas?

check Referer in http log first, maybe this is "slashdot effect" ?

I will take a look, but VB said most likely a DDoS.

I would think there would be a increase in signups if they really wanted to see that thread since guest can't view it now.

it might have been like: look how lame this thread is.. Then it stops working for people so they re still unlikely to signup! Why would you have a ddos on a specific thread?

That's what happened, 1600 guest connected to that thread and the number kept climbing until the forum was renamed.

It was causing the whole forum to lag. Every ip was different and came from all over. Financial companies, Lexmark, Korean Army etc...

When it was renamed back it started up again. Hosting was contacted and it seems to be ok now.

There's a giant german rabbit?

It was a popular search on yahoo and our thread was listed. We think that's where someone found it and decided to mess around.

https://vborg.vbsupport.ru/

Coming from different IPs sounds like DDoS to me. I'm glad I'm running home server. My router would block those DDoS attacks before it gets to my site. :)

JESUS! THATS ONE HELL OF A RABBIT!

I wonder if it was some bot. I mean if it was someone ddosing you, wouldn't they figure out you moved it?

its so obviously photoshopped!