To protect from annoying password tries we use fail2ban. Add ips to it is easier with new instance of sshd.