I always run ssh on a really high port, which does a decent enough job of keeping the password guessing bots.