I read that using nginx you should be more protected.Opt out of Censys Data collection, this should hide your IP from bein looked through them.
You can Google how to do this ^
Then I use Geoblocks for problematic countries like China, Turkey, Russia, for example. Your Events in the security tab of Cloudflare should tell you more about where the attacking IP source country is.
Windows is a bad idea most of the time. It can't match the performance of Linux, especially an optimized server.I read that using nginx you should be more protected.
do you know anything about it? Can it be used on both Windows and Ubuntu?