If like the monkey house you have to suffer fools probing ssh and do not want to move the location then the tools at cipherlst (not here) will not prevent those but give fail2ban (my blog) a rest for the more determined script kiddies.
sshd[x]: fatal: Unable to negotiate a key exchange method [preauth]
sshd[x]: Received disconnect from 126.96.36.199: 11: Bye Bye [preauth]
They come but cannot find a means of talking, and yes ssh still works.
I have a bonus post on sshfp records scheduled but your need dnssec (my blog) for that. Hope your excited for that