What do you do for toxic backlinks?

Hi,

I have a website that ranks very well, but for several months I’ve been seeing hundreds of referring domains (e.g., 9pcm4ydko.info, aircon-cleaning-support-line.xyz) pointing to my domain. I’m suspecting a negative SEO attack.

Every day, between 1 and 10 new domains appear. It seems my Google rankings aren't (too) impacted yet.

What are your recommendations regarding this? Should I be concerned?

Does this happen to you too? Is it possible to trace the source of who is paying to harm me?