Well mostly it's AI scrapers at the moment (I wouldn't mind as much if they just chilled out, but it's like hundreds of connection attempts per second).

The other thing is DDoS which I don't really have to deal with, but it's nice to have just in case.