Hi All, My appologies if this is against the group topic (and someone please let me know so I will not post again if I come to the same position)... Is there a member of Comcast Abuse here... For some time now a host has been attempting to DoS (as part of a larger DDoS) one of my machines. I have a reporting script that has now been running for at least 24 hours with no change in the traffic (even Kornet has clean up their reported hosts)... Sample from a few minutes ago: 21:02:42.538809 24.98.155.201.4002 > 203.15.51.44.3995: udp 1015 21:02:42.640085 24.98.155.201.4002 > 203.15.51.44.3995: udp 1022 21:02:42.777978 24.98.155.201.4002 > 203.15.51.44.8864: udp 1019 21:02:42.854118 24.98.155.201.4002 > 203.15.51.44.12814: udp 1018 21:02:42.971654 24.98.155.201.4002 > 203.15.51.44.12814: udp 1019 21:02:43.082695 24.98.155.201.4002 > 203.15.51.44.31305: udp 1017 21:02:43.215009 24.98.155.201.4002 > 203.15.51.44.31305: udp 1019 21:02:43.307266 24.98.155.201.4002 > 203.15.51.44.25940: udp 1023 21:02:43.419239 24.98.155.201.4002 > 203.15.51.44.13263: udp 1022 21:02:43.503134 24.98.155.201.4002 > 203.15.51.44.13263: udp 1017 21:02:43.650252 24.98.155.201.4002 > 203.15.51.44.26162: udp 1018 21:02:43.711223 24.98.155.201.4002 > 203.15.51.44.25159: udp 1015 21:02:43.843544 24.98.155.201.4002 > 203.15.51.44.25159: udp 1017 21:02:43.964055 24.98.155.201.4002 > 203.15.51.44.4333: udp 1023 21:02:44.049052 24.98.155.201.4002 > 203.15.51.44.4333: udp 1020 21:02:44.180422 24.98.155.201.4002 > 203.15.51.44.28683: udp 1023 Thank you.