[Littlemaster]

In my experience I have experienced some attacks from chinese ips(sorry to say, but most of the ips are from chinese) to login to ssh port. Simply changing port had stopped those attacks. Mainly these attacks occur when we are using an ip shared on the public domain. DDOS protection is a treatment while our own actions may can prevent the server from attackers. As deanhills said having DDOS Protected server may cost a bit higher. I use cloudflare to hide ips and avoid leaking services maximum.