[Semaphor]

> in my experience almost every website will be DdoS attacked from time to time.

The place I work at has been online since 1996, not even a DoS yet, let alone a DDoS. Though we now use CF to filter all that bot traffic.