You might read through some of this.
https://forum.directadmin.com/threads/howto-csf-firewall-lfd-login-failure-daemon.27315/page-6#post-217682
I think in general it as you surmised no really good solution.
The best thing might be to use ManageSieve to filter them out in to a separate email...