is this a public server? would you be at risk of DDoS attacks?

I’d say switch vps providers, one with proper DDoS protection.

blocking regions can help but once the pipe is full there’s nothing much you can do from your side.

you don’t pay for lifetime packages for services that cost the provider money on a month to month basis like a VPN, any service that does this is a huge red flag.

the service will probably go bankrupt before you get your money’s worth out of it