I once got a message in my logs “you have been powned” :/
Aah. I diverted my domain to cloudflare, allowing only traffic from 1 country in.
So instead of exposing my IP publicity through my registrar, I set the firewall to only allow traffic in from cloudflare.
I would have loved to install PfSense as well but it was out of my budget