Wildcard banning IP's is not often an amazing idea... Often attacks will come from multiple ranges where only maybe 10 IP's are actually doing anything to harm your server... You could change the SSH port to something stupid that people wont guess, but from my understanding there is some...