A Modest Proposal:

We set all our servers to listen on port 4443, and walk away from the whole sorry mess.

Make it all again from scratch. Block whole swathes of IP ranges known to belong to FAANG.