Yeah, my setup was already pretty secure; and I ended up just switching to a non-standard port for cleaner logs. But since then I haven't spotted a single brut

Yeah, my setup was already pretty secure; and I ended up just switching to a non-standard port for cleaner logs. But since then I haven't spotted a single brute-force attempt on any of my boxes...