One awesome thing about our upstream provider is we automagically can get an IP behind a network device that analyzes traffic and attempts to mitigate the "bad stuff". Each server is also on a 1G line with a 10G switch so we can also "eat" a fair amount of traffic alone.
In case you're curious it's Cisco Guard or Arbor Networks TMS - both splendid devices that work well.