Truly, the drama level isn't overly high.

But the focus ought to be on banning based on access logs from years ago. With potentially unreliable geolocation. And IPv4 addresses that may have been announced from many different autonomous systems, over the years.