To add to that, sshd should never be exposed directly on the internet. There are a myriad of ways to hide it. Port-knocking, poor-mans port-knocking using iptables and xt_recent, Ostiary server/client, firewall to specific networks, just to name a few.