I'm using fail2ban to block script kiddies. Here is one line what you will find in your auth.log
May 11 05:32:14 srv01 sshd[79609]: Invalid user postgres from 37.49.226.178 port 46504
This description can help you how to install and configure fail2ban I will update this post with new infos.