Comment by Havoc

Also...stick the SSH on a non-default port. Cuts login attempts down to near zero.