I use cloudflare and only allow paths I know. i.e /blog* /app/*

I block everything else

That kills most of it.