I understand, and it's absolutely fine for Cloudflare Spectrum. However, my next question is whether the Arch Linux Team has an allocated budget for this solution.

If no budget is available, I recommend setting up a free-tier alternative such as Fail2Ban. This tool can help monitor known attack vectors using publicly available threat intelligence. As part of our IOC (Indicators of Compromise) strategy, we should proactively block public IPs identified through these sources within the Fail2Ban configuration.

Without implementing a mitigation solution, these DDoS attacks are likely to persist. Once such details are exposed publicly, it becomes extremely difficult to prevent further exploitation unless appropriate controls are in place within the infrastructure.

Please let me know your thoughts