[smart (OP)]

I have become aware that Cyveillance.com is integrated into the PRISM security framework: https://en.wikipedia.org/wiki/Cyveillance

I find suspicious that the NSA may be attempting to scan my domain as part of their global cyber-surveillance program (PRISM).

I also found an interesting open source project which allow the blocking of Cyveillance/PRISM IP addresses through nginx and Apache webservers: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

Questions:

1. How do you manage security and privacy of your domain? Currently, I block all suspicious traffic through iptables.
 
2. Is it recommended to monitor and block suspicious web traffic (ie: Cyveillance) to your webserver?

What do you think?