I'm very unhappy to have to post a message here to get someone at globalcenter.net to help in tracing an attack that has been going on for several hours now. Their NOC notified our NOC that they would not be able to get security involved in this attack until monday, which is completely unacceptable. If anyone cares, the target for the attack is a single IP address of 207.227.138.15 and it has been spoofed to be coming from several different IP addresses over the past few hours. The first few addresses used were 1.1.1.1 and 2.2.2.2, now the current traffic flow is said to be coming from 207.227.138.15. I personally have no problem with blocking this attack to stop it, but it sure would be nice to actually nab one of these people once in awhile. Thanks for the lack of help, Brian