Hey. Attacks (usually DDOS attacks) are the responsibility of the webhost to mitigate; they're the only ones with the tools to do so (unless you're renting an entire server, which I assume you don't). If your host can't or won't handle this problem, it may be time to switch hosts. I haven't had a DDOS attack yet, but my website became very popular on Reddit for a hot second, which amounted to the same thing, and my provider handled the load themselves.