Why even bother with rate-limiting if you can just ban the offending address? If someone makes 10-9999 attempts to auth in the last 10 minutes just cut them of

Why even bother with rate-limiting if you can just ban the offending address? If someone makes 10-9999 attempts to auth in the last 10 minutes just cut them off. Even a 15 minutes ban would makes most of the bots to go away. Make the ban longer (couple of hours is enough but you can use 24h or more, if you are paranoid) and you will never see the same bot again. You can do it even with a simple PowerShell script. Of course the best method would be to not to expose the RDP at all (RCE is still a thing) but...