The public internet is a incredibly hostile infosec environment and you pretty much HAVE to block requests based on real time threat data like https://www.misp

The public internet is a incredibly hostile infosec environment and you pretty much HAVE to block requests based on real time threat data like https://www.misp-project.org/feeds/ https://www.misp-project.org/feeds/ It is fun to create honeypots for things like SSH and RDP and automatically block the source IPs