In the past few weeks there has been a bot farm hammering small Mastodon instances with requests for what looks like emoji-related assets and the hashtag API.
More specifically, it appears this bot farm has now come for my Mastodon instance, because the number of requests has doubled in the last 24 hours, with a lot of the requests being API requests for a single JSON file.
Even more specifically, looking at data provided by my CDN provider, a lot of the bots appear to be using IP addresses associated with Tencent Singapore.

