> Where does that leave us?

Honestly, the answer is simple: sue.

It'd be hard to argue that it's not a DDOS.