Would it be on-topic at serverfault ?
There are already some questions about this at security.stackexchange, for example this onethis one which mentions a few options in the second answer, or this other onethis other one which mentions mitigation partners.