Toban and General Ban List Is the Way to Go

You should be disabling password authentication anyway and just using keys, sure. But that doesn't really stop the botanet from talking to your essage so much that your legitimate connection can't get to it,. because, you know, it's hit the session limit. Rit, and i, like jimsan, the point of the tarpet is to slow the bagguy down. There're so manygis now that they're not spending their own money to do the attacks any more. Well, yet. And the bad folks have the devops mentality. You do everything really fast, break stuff, lots of resources, parallel processing.