I happened to be utilizing a mix of Limit Logon Attempts and fail2ban to block IPs in IPTables.