Fail2ban would have been all they needed. It's what I have, works great.