I don’t think war drivers trying to break into my host aren’t regular users. But I think successful requests to my RSS feeds are regular users who are routinel

I don’t think war drivers trying to break into my host aren’t regular users. But I think successful requests to my RSS feeds are regular users who are routinely checking my feed and have set up some tool to do so. So that’s demand. And it’s pretty regular. The people trying to ssh are likely doing so automatically on every host in existence.