@romin @catto @splitshockvirus
Nonstandard port + fail2ban keep the log spam at a minimum, it's like five tries and then goodbye for 15 minutes. Few are insistent enough to keep going and in this case you can block the whole subnet manually.