We have fail2ban send a request to a central server, then edge ban ips that have hit a couple hosts. Works well for us.