Individual DDOS?
http://matchhistory.na.leagueoflegends.com/en/#match-details/NA1/1575890029/31633686?tab=overview
Take a look at the money graph, then come back and try to guess when the ADC disconnected (and reconnected, rinse repeat 5 times). He claims he got DDOS. But he reconnected in the last minute to give us this story and avoid the mark. He should be marked unless this was actually an attack.
You should have metrics to determine when a player is DC'd for extended periods (like say, 7 minutes), regardless of if they come back. What does it matter at that point?
If it was a DDOS, ya'll should look into it.