My api is frequently scanned in the two days

After releasing the Windows version, I noticed frequent scans on my download API from various IP addresses in the two days — some even repeating from the same IP. Vercel’s firewall has already detected and blocked several DDoS attempts. What the hell do the hackers want? If you want to analyze my exe, request once or twice is ok, why do u keep downloading the app?

• rate limit for the api has narrowed

• add a Vercel firewall challenge rule to protect it

• blocked one user-agent and some ips

• and more..

  My website has no real users only scans.