pf-badhost is a simple, easy to use network filtering utility that uses the power of the pf firewall to block many of the internet’s biggest irritants. Annoyances such as SSH and SMTP bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing and/or compromised webhosts: https://www.geoghegan.ca/pfbadhost.html