You assigned a new https certificate around that time, didn't you? Those are public now and will cause an immediate scan.
Agree discord sucks.
We don’t miss Cloudflare one bit.
I don't particularly understand how CF makes money on it, with the many high traffic sites I have used that I know don't pay CF a dime. Tunnels adds so much more overhead in compute on both ends more than their normal CDN/proxy would.
There's 10+ HTTP trackers using CF. Low end EACH process 300-500 MILLION requests/24hr uncached, some exceed a billion reqs/day (using statistics from other open trackers). That's a crap load of transfer and compute to process those tiny network connections.
As someone that's run a Tunnel on a much lesser site still in the millions, the daemon uses a sizeable amount of CPU and I can't see any reason why it's not the same on the other end.
What ever source CF has going on, kudos to them and their engineering team.