Anecdata: log files with failed login attempts became far smaller after leaving port 22.