OpenSSH introduces options to penalize undesirable behavior

Article note: Ooh! More ore less built in Fail2Ban with some sense of IP ranges. Not a magical security panacea, and with some attractive nuisance foot cannons, but given the fraction of automated attack traffic I see that comes from "specific providers and regions" you could get a _lot_ of mileage out of a pretty simple configuration, which is how all good tools work.