Over the holiday shopping period our website saw a huge increase in direct load traffic directly on the homepage (from 2mil to 8-9mil hits) and the bounce rate went through the roof on that page (70-80%). This is being reported by both Coremetrics and backed by Google Analytics.
Direct load traffic continues to rise on the home page only, IT and developers have poured through logs with no significant findings, looking for non-standard user agents and IPs. Nothing looks out of the ordinary except for a small amount of hits (10-15%) coming through with empty user agents strings.
So my question is, has anyone experienced anything similar on a site and if so how was the issue solved or troubleshot? At this point we are suspecting a distributed attack.