Hello!
Like Mr. Ingram said, absolute remove 3des. However, I would remove CBC algorithms; They're typically problematic during security audits, as the Initialization Vector (IV) is not randomized as it should be.
I would reissue the command like this:
ip ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr
WHY: You always want to put your strongest algorithms first, as typical systems will attempt to use the first ones presented first. If you wanted to go a bit more secure but risk "compatibility" (as system not supporting one of the algorithms), you could also trim off aes128-ctr (though this is not recommended as AES128 is still considered a "safe" algorithm).
