I would suggest you use Cloudflare to mitigate DDOS attacks! Here’s the guide:
Alternatively, you block all IP addresses (In Cloudflare), which will spare some time to get a backup at least!