Good article and tips. I only scanned through some of it but I noticed that a security I use didn't appear to be mentioned. I run Linux boxes and I find that, when properly configured, DenyHosts (a python script) is great to automatically scan logs and lockout ssh and other attempts on the fly.

You may already be able to install it by apt or yum depending on your distro.