>>12153
From what I've seen VPN endpoints are in Korea, France and wherever, rarely if ever in the US. These are all US IPs. And what VPN service gives someone 6000 unique IPs in under an hour? This is more likely a botnet.

>>12155
>no flood protection to cover this kind of thing
What do you propose? How would you solve the problem?
The traffic looks like normal from the side of the server. It's a file and text. All random. Filename, size, image ratio. How do you make a rule that picks up on it? What if a legit new poster appears and he also gets stopped? All new threads start with 1 UID, how to stop flood but not stop new thread creation of legit users?
We have measures in place, and captcha stops. But they can train that. So we experiment to get on top of it. We'll find a permanent solution eventually (and probably the spam with stop with the end of the US midterms), but we are open for useful propositions of solutions. We listen.