{"id":18963,"date":"2026-10-22T17:00:02","date_gmt":"2026-10-22T14:00:02","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/ddos-attacks-protection\/"},"modified":"2026-10-22T17:00:16","modified_gmt":"2026-10-22T14:00:16","password":"","slug":"ddos-attacks-protection","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/ddos-attacks-protection\/","title":{"rendered":"What Are DDoS Attacks? Types, Warning Signs and How to Protect Your Website"},"content":{"rendered":"<div class=\"hkb\" dir=\"ltr\">\n<div class=\"hkb-tldr\"><b>In short<\/b>A distributed denial of service (DDoS) attack sends a huge number of requests to your site from thousands of devices at once, until the server cannot serve real visitors and the site slows down or stops. It does not steal data, but it stops your business. Protection comes in layers: a server firewall, cloud protection such as Cloudflare in front of the site, and limits on requests per address.<\/div>\n<figure class=\"hkb-fig\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.hyyat.com\/zasogooh\/2026\/10\/hkb-ddos.webp\" alt=\"DDoS attack: many requests from multiple sources stopped by a shield before reaching the server\" width=\"1200\" height=\"630\" loading=\"lazy\" \/><\/figure>\n<h2>How does the attack work?<\/h2>\n<p>The attacker controls a network of infected devices (a botnet): computers, cameras and routers around the world. They tell all of them to send requests to your site at the same moment. Because the requests come from thousands of addresses, blocking one is not enough.<\/p>\n<h2>Types of DDoS attacks<\/h2>\n<div class=\"hkb-tbl\">\n<table>\n<thead>\n<tr>\n<th>Type<\/th>\n<th>How it works<\/th>\n<th>Example<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Volumetric<\/td>\n<td>Fills the internet connection with huge amounts of data.<\/td>\n<td>UDP floods<\/td>\n<\/tr>\n<tr>\n<td>Protocol<\/td>\n<td>Exhausts server and network resources with half-open connections.<\/td>\n<td>SYN flood<\/td>\n<\/tr>\n<tr>\n<td>Application layer<\/td>\n<td>Requests heavy pages such as search or login over and over.<\/td>\n<td>HTTP flood, <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/what-is-a-slowloris-ddos-attack\/\">Slowloris<\/a> and <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/wordpress-load-scripts-vulnerability\/\">the load-scripts flaw<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2>Signs your site is under attack<\/h2>\n<ul class=\"hkb-list\">\n<li>Sudden severe slowness or downtime with no change from you.<\/li>\n<li>A big jump in traffic from unusual countries or addresses.<\/li>\n<li>Many requests to a single page, such as search or wp-login.php.<\/li>\n<li>Hitting your plan\u2019s resource limits in a short time.<\/li>\n<\/ul>\n<h2>How to protect your site<\/h2>\n<ol class=\"hkb-steps\">\n<li><b>Put cloud protection in front:<\/b> Cloudflare receives traffic before your server and filters large attacks. During an attack, turn on <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/cloudflare-under-attack-mode\/\">Under Attack mode<\/a>.<\/li>\n<li><b>Rate limit requests:<\/b> Especially for login and search pages, so one address cannot send hundreds of requests a minute.<\/li>\n<li><b>Lighten heavy pages:<\/b> Caching lets the server deliver a ready page instead of building it for every request.<\/li>\n<li><b>Block bad bots:<\/b> Read <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/block-bad-bots\/\">bad bots and how to block them<\/a>.<\/li>\n<li><b>Do not expose your server address:<\/b> If you use Cloudflare, do not publish the server\u2019s real IP in exposed DNS records.<\/li>\n<\/ol>\n<div class=\"hkb-note w\"><b>Should you pay the attacker?<\/b> Some attackers demand money to stop. Do not pay: it guarantees nothing and invites repeats. Contact us and we will help you defend.<\/div>\n<div class=\"hkb-hh\">\n<h2>How Hyyat Host protects your site<\/h2>\n<ul>\n<li>The <strong>CSF<\/strong> firewall limits connections per address and blocks attacking addresses.<\/li>\n<li><strong>Imunify360<\/strong> detects suspicious automated requests, and <strong>CloudLinux<\/strong> isolates accounts so an attack on another site does not take yours down.<\/li>\n<li>You can connect your site to <strong>Cloudflare<\/strong> for a protective layer in front of the server.<\/li>\n<\/ul>\n<p style=\"margin:10px 0 0\">Learn more about <a href=\"https:\/\/www.hyyat.com\/en\/dos-detection\/\">Hyyat Host DoS protection<\/a>.<\/p>\n<\/div>\n<h2>Frequently asked questions<\/h2>\n<div class=\"hkb-faq\">\n<details>\n<summary>What is the difference between DoS and DDoS?<\/summary>\n<p>A DoS attack comes from one machine, so it is easy to block. A DDoS comes from thousands of machines at once, so it needs layered protection.<\/p>\n<\/details>\n<details>\n<summary>Does a DDoS attack steal my data?<\/summary>\n<p>No. Its goal is to stop the site. Sometimes it is used as a distraction from another attack, so review your site\u2019s security afterwards.<\/p>\n<\/details>\n<details>\n<summary>Is Cloudflare free?<\/summary>\n<p>The free plan includes basic DDoS protection, which is enough for most small and medium sites.<\/p>\n<\/details>\n<\/div>\n<div class=\"hkb-rel\"><b>Related guides<\/b><\/p>\n<ul>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/what-is-a-slowloris-ddos-attack\/\">What Is a Slowloris DDoS Attack and How to Protect Your Server<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/wordpress-load-scripts-vulnerability\/\">The WordPress load-scripts.php Vulnerability (CVE-2018-6389) and How to Protect Your Site<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/brute-force-protection\/\">Brute Force Attacks: How They Work and How We Protect Your Site<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/what-is-waf-web-application-firewall\/\">What Is a Web Application Firewall (WAF) and How Does It Protect Your Site?<\/a><\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.hyyat.com\/en\/kb\/website-protection\/\">All website security guides \u2192<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In shortA distributed denial of service (DDoS) attack sends a huge number of requests to your site from thousands of devices at once, until the server cannot serve real visitors and the site slows down or stops. It does not steal data, but it stops your business. Protection comes in layers: a server firewall, cloud [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"doc_category":[2744],"doc_tag":[],"class_list":["post-18963","docs","type-docs","status-publish","hentry","doc_category-website-protection"],"year_month":"2026-10","word_count":534,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"ahmed fathy","author_nicename":"ahmed-fathy","author_url":"https:\/\/www.hyyat.com\/en\/author\/ahmed-fathy\/"},"doc_category_info":[{"term_name":"Website Security","term_url":"https:\/\/www.hyyat.com\/en\/kb\/website-protection\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18963","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=18963"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18963\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=18963"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=18963"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=18963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}