I found that our honeypot solution (got the idea from @Francisco, THANKS!) was a lot more accurate and the number of clients blocked by it were 0 whereas the sshcheck script we use now blocks clients who open to many SSH tabs/windows and has resulted in a couple of tickets so far. The reason we...