Limit your SSH logins using GeoLite2 "country". On an ecommerce site I help run we are using a geoblock for "anything Russia and China" and that very dramatically cut down on the bullshit script-kiddie log lines.