These match the peaks in the charts I see in the Cloudflare dashboards.
It seems that there is a peak of visits of these bots every few hours (even if they are there permanently), but I don't know if Cloudflare can see these are a real attack (maybe it will just see that as a peak of visitors), we'll see. In the worse case, I can enable something to force visitors to pass a captcha.
I'll enable the filtering later today.

Getting 500 Internal Error at 8:50pm EDT

500 internal server error as of right now.

Documenting.

Which one for example?

It is possible that now with Cloudflare there is a cache of a few minutes on this kind of files (static images vs dynamic pages), in such case thumbnails need more time to be updated, as their address does not change (main pics have a fake parameter when you are logged in to force the update).

I've validated some replacements on this page https://www.imcdb.org/movie.php?id=1604099 but the old ones still appear in thumbs even after refreshing the page.

I've created an account at Cloudflare.
Now we have to wait that the DNS records are updated to point to their systems for all internet providers.
So it will take 24-48h until it is fully active for most of visitors.
After that (in 2 days), I'll have to block all trafic that does not pass through their servers, to fully activate that and block the bots who may still use outdated DNS info.

The new bot is getting worse and worse, they make more and more connexions at the same time, from all different IPs, this is almost like a DDOS attack... ( https://en.wikipedia.org/wiki/Denial-of-service_attack )
I don't if it is intentional or not.
Maybe they are are just that their incompetent in browsing a site without killing it (they just don't want to be blocked), or that they don't care, or both.

Currently having a 500 error that i wish we could ship into another Galaxie...

I'm glad that I validated as much as I could while the board was working. Seems to be slow again.