> you care about network security, why are you exposing ssh ports in public anyhow? Put them behind a VPN.
You don't need to do this. SSH is secure enough. Require key-based authentication and leave SSH on port 22.
You don't need to do this. SSH is secure enough. Require key-based authentication and leave SSH on port 22.
Sure, those drive-by attacks are pretty weak and not much of a threat against a hardened configuration and the real attackers will find the new port anyway, but it reduces noise significantly.
Cleaner logs are easier to parse, so the net result is that you can spot attacks that you care about much more easily.
1: at which point you'd most likely need to be a lot more involved anyways, and you should most likely be running something more serious in front of your server anyways...