So a few days ago I finally installed logging software that actually worked. I needed to have another DoS happen and this is exactly the day I wanted, because I didn't want service to be affected during the peak times including the weekend. I finally retrieved an IP and this is just a DoS, as it's just one server (also means that this is the simplest attack that could be done with a little money, sheesh, what a script kiddie).
Lo and behold, the server used with the higher or equal bandwidth to drain my resources can now be reported. Let me just throw this in here:
6. A person guilty of an offence under this section shall be liable-
on summary conviction in England and Wales, to imprisonment for a term not exceeding 12 months or to a fine not exceeding the statutory maximum or to both;
on summary conviction in Scotland, to imprisonment for a term not exceeding six months or to a fine not exceeding the statutory maximum or to both;
on conviction on indictment, to imprisonment for a term not exceeding ten years or to a fine or to both.
These are criminal acts but this isn't my goal. I'm hoping to at least to cause termination of servers (and therefore, future purchases) from LeaseWeb, and nothing more, because that would really be enough get to him.