Python daemon and fail2ban scripts to detect syn floods.
sudo apt install python3-psutil
sudo make install
sudo service syn-detect start
Since syn-detect doesn't have historical data of what is already banned, it cannot associate single hosts with previously banned subnets.