DDoS: When a Crowd of Fake Visitors Takes a Website Down

The 30-second explanation

Imagine a shop with a thousand people who walk in and stand there doing nothing. Real customers cannot get through the door. That is a DDoS attack.

How it works

1. 1

   1. Build a crowd

   Many devices are taken over or rented.

2. 2

   2. Aim

   The attacker picks a target site or service.

3. 3

   3. Flood

   All devices send requests at once.

4. 4

   4. Denial

   Real users get errors or timeouts.

The attacker controls a large number of devices, often infected computers, cameras or routers, and tells them all to send requests to one target at the same time. The target spends its capacity on fake requests and cannot answer real ones. Defenders respond by absorbing traffic with large networks, filtering obviously bad requests, and rate-limiting. The attack harms availability rather than confidentiality: nothing is usually stolen.

Real-world example

How to spot it

• A sudden traffic spike

  Volume far above normal, from unusual places.

• Slow or unreachable pages

  Timeouts across the site at once.

• Requests that look the same

  Thousands of near-identical requests to one page.

• Ransom demands

  A note threatening more traffic unless paid.

What to do

1. 1Put public services behind a provider that can absorb and filter floods.
2. 2Set rate limits and know normal traffic levels, so you can recognise an attack.
3. 3Have a plan and contacts ready before an attack, including how to communicate with users.