Yep, they are flooding the server with TCP connections. It's getting to the point where someting like cloudflare is the only option.

The private pool i mentioned would be running parallel to the public one, but i would be free from DOSers.