I just run ssh on a different port. "Security by obscurity" works reasonably well to weed out the low-effort script kiddie nonsense.