I had a irc server for my friends, one of not-so-friendly visitors told me that the server will get down, and it went down. I lost ping to my server, CPU & the bandwidth were all at 100%. The support told me that I should use another company. I went to a company that has DDoS protection http://www.online.net/
I find it unacceptable that you can be DDoSed so easily, it's like we're still in 90'.. DDoS protection should be something ubiquitous for small power servers like VPS, otherwise it's trivial to get them down.