said by DeLiver3:IPs vary widely and cover the network subnet /30
Do you mean the source IPs vary widely and they are hitting all 4 destination IPs within your static /30? And you already re-IP'd through provisioning and the attack followed you to your new block?