DDoS Extortion Investigation. Russia Business Network

My company is conducting an investigation against an unidentified entity which I currently believe to be Russia Business Network ( [url]

On at least two occasions we have had customers with only minor DDoS issues (let us say 100 - 1000 Mbps at peak) suddenly experience 2 - 4 Gbps attacks which require a $100 to $500 service to jump to roughly $2000 - 5000 per month depending on exact specifications. Naturally this type of issue is not good for the business of our customers and subsequently not healthy for ours.

On each occasion an unnamed individual (I know who they are but I will reserve judgment at the moment) will come forward offering to let our customer try a "special new" protection product they developed that can protect against 10 Gbps for only $2000 which is sometimes a fraction of what my company or any other respected mitigation provider would be forced to charge.

Here is the network they end up on: [url]query=SBL62147 .. and up goes another red flag. When you take a look at this network it routes to ELTEL in St. Petersburg, Russia ( [url] which based on some basic analysis I very seriously doubt has any form of mitigation capabilities, much less multi-Gbps.

Essentially what is happening is they're buying "protection" for $2000.00 per month from the "company" who is actually committing the attacks when in reality that end user has no significant DDoS issues.

I'm actually sitting on a lot more data than this but I need to collect some more data and opinions on whether or not this is linked to RBN. Once my investigation is complete I will issue a full report.