This is what ipset can do for traffic on a home server that’s not wanted on a slow 6MB DSL connection.
I only use my home server for zoneminder, testing my commercial website and streaming movies.
Got tired of hackers looking for files that don’t exist on my home server and non-complying robots.
Check the drop in bandwidth.
Setup up a redirect to the NSA webite. They can deal with the hackers.