I've been blacklisting those folks who have tried to brute force access to my SSH server. I'm getting an average of three attempts per day. They look automated e.g. compromised PCs. Still a lot though.