Could be because of number of pages you have. At work we have several million public content pages, so a few badly behaving bots can already do a lot of damage.
replyFor my personal website it’s 10x more bots but I barely notice because it’s a few pages.
Get a letsencrypt cert, I always get a massive wave of vulnerability probers after renewing.
reply[delayed]
replyI don't even have a domain name and I'm getting lots of hits.
replyI recently brought up a website on a never-before-seen .com domain. Within about 10 mins of bringing it up with a SSL certificate, Anthropic came knocking on the door requesting the front page. (Almost certainty due to them watching the Public Certificate Transparency logs)
replyOld and busted: serverless
replyNew hotness: DNS-less