so why was I getting hit with over 1,400,000 request a day to the web URI and not the API by some bot farm in China the other week. They were also hitting other lemmy instances.

I blocked the fuckers, no qualms at all.

Even if they were using the API they were not being nice about their shit.