Low(ish) traffic sites & servers have seen high-proportion-bot-and-vuln-scanner traffic since at least the late 90s. Solution used to be to blackhole IP blocks

Low(ish) traffic sites & servers have seen high-proportion-bot-and-vuln-scanner traffic since at least the late 90s. Solution used to be to blackhole IP blocks associated with certain countries, provided you didn't really, really need to serve those countries. Would usually stop 99% of it, so the logs were a lot less noisy and you could tell when you were under focused attack and needed to really pay attention (which was basically 100% of the time, without the blocks) The modern version is letting CloudFlare hit IPs in those countries with never-ending CAPTCHA challenges.