So, my googlefu has rendered a solution to the issue provided badspot has a spare computer and the servers are hosted localy (his home, or someplace he can chuck a desktop into the data flow). Simply toss a PFsence box to interrupt the flow of data from the input source and set it to drop all packets from the known spamming IPs. Its a quick, dirty, unstable method but it would get the servers back online ASAP even through the DDOS. If they are somehow managing to max out the cap of the inbound/outbound line, then we are truly SOL.