I usually do something similar for SSH, and 445 as well (though for 445 lateral movement is my priority - it’s still quite bad to see it on the Internet)