This is a cool and easy-to-use (security) feature from Palo Alto Networks firewalls: The External Dynamic Lists, which can be used with some (free) 3rd party IP lists to block malicious incoming IP connections. In my case, I am using at least one free IP list to deny any connection from these sources coming into my network/DMZ. I am showing the configuration of such lists on the Palo Alto, as well as some stats about it.