Via a proxy? Or some other kind of DDOS protection? If it's a proxy, that should be considered hosting.

Cloudflare does provide APIs to look up security threats by IP addresses that could help with DDOS, and I wouldn't consider that hosting: https://developers.cloudflare.com/api/resources/intel/subres...