gy -- if you come up with wget (loops are allowed ;) ) to get those nonce messages logged indicating an attack -- I would be 200% convinced then! ;)