NNR is reactive. if your DC got a connection from an external IP, then yes, we will try to NNR it as well, we currently do not filter "external IPs".
I would carefully check why an external IP can contact your DC directly, and if this is intentional.
www.000webhost.com