Just to add to the conversation, I use a program called ssh-black to block all IPs after 5 failed attempts to SSH in. http://www.pettingers.org/code/sshblack.html I'm not suggested it's the best solution out there, but it another option that's available.