You should consider looking into fail2ban or Crowdsec.

I recently added Crowdsec to my firewall and it seems to work pretty well. I don’t host any public facing services on my network. But maybe someone else with more experience can chime in about it. I believe both tools are pretty good for stopping bots