Distributed brute force ssh attacks

This used to work, but some of the botnets have gotten to scanning ports 0-65536 slowly to see what's up. They then come back later at your high port. Thankfully its not a lot of them, but my guess is that at some point every botnet will have the logic in it.