One of the simplest ways to block unwanted connections is to filter on client id. I haven't seen anyone willing to change it even though I've blocked libssh, sshgo, and paprika.
Of course, this functionality is only available in non-standard SSH servers such as the one from Bitvise.
Of course, this functionality is only available in non-standard SSH servers such as the one from Bitvise.