@bekopharm @kfitz I started with a simple fail2ban rule which caught the worst offenders, I've also gotten pretty good at letting things hit search boxes and blocking failures. I've also simply banned Alibaba Cloud where a bunch of the requests have come from. I've also put a bunch of work into making sure my error pages are light weight so I can manage to make most of the requests hit 503 and have minimal load costs, and then let normal users browse.

My only regret is making a signon wall on my RPG wikis - but seems to be a necessary evil.