Using fail2ban/psad, and when probes are detected, automatically have all your hosts ban the bad guys.