Agreed, if not a proxy then put your services behind a VPN or a bastion host when possible.