The amount of bots scanning for vulnerabilities or spam for a hidden, no seo, no important website approaches 700 visits a day. In the past it was a bit more personal as someone had to target you directly, now it's just crawlers and bots everywhere. I know not anyone is able to do the same but I basically block ASN for all clouds and cheap vps hosters + few countries.