Better solution: require VPN connectivity and don't expose SSH on any port to the public Internet.

Running services on non-standard ports will make the next admin that takes over this server want to track you down and smother you in your sleep.