These don’t sound like a scalable cure

Monkey’s wedding.

In case you haven’t considered this, some helpful advice. To keep them from the lemmy.world door after the CDN installation

• Change the public IP addresses
• rotate your certificates
• block all traffic appart from the CDN and only allow a limited known good IP addresses (like yours and your support team). These steps will make your server harder to find, hopefully they move on.

Never forget, in nineteen ninety eight when the undertaker threw mankind off hell in a cell and plummeted sixteen feet through an announcer’s table.

• ShittyMorph

I don’t get this reference.

I’m not 100% on this but I think GET requests are logged by default.

POST requests, normally used for passwords, don’t get logged by default.

BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs

Make sure it will stay relevant