https://bugs.winehq.org/show_bug.cgi?id=57151
--- Comment #16 from Jeremy Newman jnewman@codeweavers.com --- I did some work adding some indexes to our DB tables. This got the load under control enough I felt the site was "usable" now without the "I'm Under Attack" setting.
If the load average jumps back up over 5.0 for extended periods I will re-enable it temporarily.
I'm also looking into other solutions to handling the bot problem.
mod_evasive is a helpful one to setup.
A more nuclear option would be to enable this: https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker