Update, this same user attacked our site three separate times in the last two days. Every time we were forced to block their IP address to halt the attack. But, since it was a dial-up, they were able to repeat their attacks later. We were notified that this incident has been resolved with the deactivation of the user's ISP acount.