Would it be on-topic at serverfault ?
There are already some questions about this at security.stackexchange, for example this one which mentions a few options in the second answer, or this other one which mentions mitigation partners.
Samuel Peter
- 101
- 1