Neat trick: tail -f /var/log/nginx/access.log | grep ' 429 ' Watch and see if any IP is spamming you, then `ufw insert 1 deny from <ip>`
Spammers hate this one simple trick.
THey got a lot of 200's t oo, I came up with a monitiring script and blocks them afterr a number reached, every minute