Well we have our own firewall, which we're blocking all these IP's with. But we were attacked with a big range of IP's (so alot of datacenters) so was almost impossible to just firewall and move on. Most attacks I'd be able to sort now on our VPS, and be up again in 5 minutes. Because of the range, we couldn't with this. There's an option to pay around $100 a month on DDOS protection, but I'm not expecting these sort of attacks oftenly, our niche isn't the same as HF. As we get bigger, I'll just upgrade our hardware to make sure we can still cope with it ourselves.