You could enable Suricata on OPNsense, which will allow you to subscribe to some known attacker lists and so one. But the problem these days are mostly AI scrapers that usually don’t show up on these lists as they are not attackers per se, but just cause a lot of database load by probing every part of your web-applications.