To prevent(block) ssh attacks i use a little script that run and block users that failed many times(5) to login with password and block theirs ips on the port 22. I alaway have a few ips blocked evrydays.


The script :
http://www.pettingers.org/code/sshblack.html