based on this below solution I wrote a shell script, which is blocking port scanning, so nobody can find (or much more slowly) your "hidden" SSH or FTP port
The protection based on built-in firewall.https://unix.stackexchange.com/questions/345114/how-to-protect-against-port-scanners
The script stored on GitHub:
https://github.com/Feriman22/portscan-protection
I hope you find it useful!
Best Regards,
Feriman