>Uses IP to get ISP
>Contact ISP and give exact IP
>ISP follows legal obligation to limit service to customer until investigation is complete.
>they hold no requirement to warn customer if they have a legitimate reason for suspicion
>kid keeps DDoSing
>gets dropped from service all the while being unable to send more than 200 bytes of data at a time
Or you can just find a packet monitor, wait to be pinged repeatedly by a DDoS, block the data, and Ping them back. Do it right, and the ISP penalizes them anyways.