I usually just limit SSH connections to one of my own static IP addresses, as well as disable password authentication and implement PSK. At first I was shocked

I usually just limit SSH connections to one of my own static IP addresses, as well as disable password authentication and implement PSK. At first I was shocked by the amount of intrusion attempts my servers were logging, but as time goes on I see that no attempts have yet been successful, so these sorts of intrusion attempts have probably made me complacent. (never a good thing) That said, I found the article to be lacking in listing mitigation alternatives, such as those posted here in the comments.