This has layer3 properties, such as connection rate, and was most likely mitigated using layer 3 filtering.