When I ran a cpanel server, I found ConfigServer Firewall to be super-awesome. Every few hours I got an email stating "detected brute force from X.X.X.X/CN, blocked". It analyzed failed logins, brute-forces, too many apache connections, etc. and inserted an iptables rule.
There are other...