My main blocking which I do is to auto-block people coming in trying to brute-force a password. I also do a random "PAM style" delay before reporting an error.