We are no longer seeing timeouts and slowness in the catalog.
Our hosting provider has implemented a CAPTCHA that appears only when load is high. Users will only see the captcha once - after an IP address is validated, they will no longer see the CAPTCHA and they will not need to validate over and over again.
We're continuing to explore additional tools to combat bot attacks. If you see further issues, please open a ticket.