ddos can run over a rather long period of time and come and go fairly quick. cutting the internet connection just is no viable solution for an online service.