Update - After spending about 10 hours on Wednesday making lots of changes to the server, and adding protections and blocks against bots, I think I've stabilized things enough so the site is relative responsive.
Fingers crossed.
Note - Some of the changes involve rate limits, so if you constantly refresh/reload pages (like bots do), you might see this:

(HTTP error 429)