Im the owner of an Hosting Provider in Costa Rica, and for that reason we have quite a few clients in the gambling business, we have been experiencing awful DOS attacks from hundreds of Zombies all over europe and the US, we have invested in serious hardware like the WatchGuard V100 (20+ K) and secondary internet pipes to survive these attacks, they are getting more and more sophisticated, now the totally use spoofed packets on port 80 so its really difficult to solve and track unless the source computer is making > 100 connections per second, we have upgraded pipes into Fiber Optic but reality is ... unless we have a burstable 1GB connection there is no way to kill the attacks ...
Our clients constantly receive ransom notes from Russia asking for 30K to on western union to stop the attacks ... just sucks ...
i been trying to get access to one of these infected computers to infect a computer of mine with this backdoor and see where its reporting to ... im sure it reports to an irc chat room server and im sure i can take it from there however isps do not help ... this is a battle that will spread over and over ... UGLY