Hi,
we run a new Web Application Firewall to bring more security in the game. We had many attacks and the WAF already helps a lot.
I have to admit that we have also false positive but for that we need feedback so we can adjust the rules.
Most attacks cone from Mullvad and other VPN IPs. We don't block any VPN provider or Tor but IPs which were involved in such attacks.