I’ve run a tiny AWS non-profit, non-subscription, non-donation web site for 21 years. The attacks started about a year ago, & a week ago finally managed to repeatedly crash the server. No data was lost, but I had to repeatedly restore the root volume from a snapshot. AWS makes that easy, but it’s still annoying.
Someone recommended Cloudflare, which I added two days ago. That stopped the crashes. Yesterday, I added two custom IP filters (apparently two VPNs), & that cut 70% of the traffic.
No more 404 error. However, after switching to the new dashboard & then clicking on security rules, that takes me back to the old dashboard. FYI. I assume that will change.