On: Crowdsec: A Fail2Ban alternative written in Go

[sigio]

That should be just a matter of making firewall blocks at least a /64, and considering scans/source-ips also as a netblock instead of individual ip's.