Does your school, or the school you are responsible for, have inbound firewall rules that can be removed? I strongly suspect there may be legacy inbound firewall rules in place exposing schools to cyber attacks unnecessarily. If you wish to review what access is in place at your school, please reach out to me and we can take a look at this together.
Thanks, Kev