Good question. It got me interested so I did a little search; There is no mention of DDoS in the Mendix docs anywhere. Looking at questions/94099 the answer is no, but you can take some first steps like logging calls, ip's or setting delays. The answer of questions/87331 suggests to check out AWS.
So my conclusion is ‘no’ and my advise is to take this up with support.mendix.com