Most are using fail2ban to block ssh scans, but it can do a lot more for you. Due to it’s modular nature you can scan in almost every logfile for things you don’t like and block it. If you look in /etc/fail2ban/filter.d/ you can see a lot of predefined filters for several mail or ftp [...]