btw i moved this website behind cloudflare with waf and it solved this issue entirely
actually codex computer use did it in 25 minutes
- moved dns to cloudflare
- moved dkim + spf railway records
- added ssl and www apex redirect
- blocked php word press probes
and now my network logs look clean, only 200s from my own production testing