Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies

Security · 3 min read · Updated October 25, 2026

DDoS attacks and small business websites

Short answer: A DDoS attack floods a site with traffic until it stops answering. Small businesses are rarely targeted on purpose. When it does happen, a site served through a modern network usually rides it out without anyone noticing.

What it is

A distributed denial-of-service attack sends overwhelming traffic from many machines at once, usually a botnet of hacked devices, to knock a site or service offline. It doesn’t break in or steal data; it just makes the site unavailable while it lasts.

How likely is it?

Targeted attacks mostly hit larger companies, gaming, finance and organizations someone is angry at. A small business is more likely to go down from a hosting problem, an expired domain or certificate, or a hack than from a DDoS. Still, sites on cheap shared hosting can be knocked out as collateral when a neighbor is attacked.

Protection

  • Hosting served through a global network (CDN) that absorbs floods. Many offer this by default.
  • Monitoring, so you know immediately if the site stops answering.
  • Your booking, phone and Google listing details also available elsewhere, so customers can reach you if the site is down.

Written by Nikita Huttenlocher, founder and lead engineer at Huttenlocher Technologies, a web design and software company in Myrtle Beach, South Carolina.

Questions

Someone is threatening to DDoS us unless we pay. What do we do?

Don’t pay. Report it to the FBI at ic3.gov, make sure your site is behind DDoS protection, and call your hosting provider or us.

Are your sites protected?

Yes. Sites on our hosting are served through a global network that absorbs traffic floods, and our monitor checks them every five minutes.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.