You work in IT as a cybersecurity specialist. Your phone is ringing constantly. Employees from the operations, budget, and acquisition department are reporting they have lost network connectivity pertaining to email, web access, and company applications. You check network logs and identify several requests beings sent to company servers, overloading them with traffic. You also make note the requests are not legitimate and possess fabricated return addresses.

What type of attack is this, what would you do in this situation (incident response), and how would you prevent this scenario from reoccurring again in the future?