New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Comments
Why not use Cloudflare WAF and setup it correctly? It would save you few @BilohBucks and pain with setting up filters
Yes, use Cloudflare. We still use it and are happy!
I don't think there's anyone who caters to web hosting who can truly help with this and be cheaper than just using an actual WAF service. Use CloudFlare, keep your site in "I'm Under Attack" mode if you get daily attacks. If your web hosting provider gives you ssh/terminal access, you can use a script to do something like monitor your access log and toggle CF under attack mode during high traffic if you don't want it on 24/7. CloudFlare works great for me for L7.
We have layer 7 filtering, feel free to check our services starting from 2$ per month. We also could help customizing WAF rules manually based on your needs
and we have dynamic UAM page that turns on during attacks only.
https://vingo-host.com/
Edit:
Location is Netherlands, Luxembourg. Not sure if that would work for you.
Free plan?
I use a paid plan but the main thing that is useful is actually having your domain set to "I'm Under Attack" mode. But I also force challenge some ASNs that are very common for DDoS sources (also which can be done on free plan.)
You can do that by doing an WAF rule to set Managed Challenge to anyone. Also if I'm Under Attack mode is enabled it can affect SEO crawlers and this is bad.
As others have mentioned, use cloudflare WAF.
If you don't want CF then you may also try Sucuri.
Have you tried bunny.net shield?