Don't overthink the "who's attacking" part. A lot of it is just baseline internet junk: botnets and scanners hitting anything that's reachable, and anything with "Bitcoin" in the title gets extra attention.
Using Cloudflare as a temporary shield is totally reasonable for a small project. If you ever build your own firewall, start with the unsexy essentials: rate limiting, caching, sensible timeouts, and locking down the origin. Censorship resistance is the dream, but uptime is the day job, and uptime is art too.
\
Thank tou. Yes, I agree, but I want to add two points.
1. Botnets and bad spammers often scan websites to find weak places. If they find a vulnerability, they can share it with hackers. Then hackers can make a stronger and more serious attack.
2. I already use Cloudflare as protection. This is my Cloudflare security rule:
https://github.com/buybitart/cloudflare-security-artArt is my dream. I want to make a simple solution for all artists. It should be easy to integrate and resistant to censorship. Sadly, social networks feel dead now, because algorithms push creators down and hide their work.