[dokument]

Additionally having a non-standard port does help defend against 0day exploits before patches are available or before you are able to disable the port.

[Wintereise]

The proper solution to this is having a separate management network that already requires authentication for getting into.

However, indeed. Minimized log noise is great for analyzing anomalies manually.

[tptacek]

When was the last preauth remote vulnerability in OpenSSH?

[leeoniya]

nevertheless, past performance is not an indicator of future outcomes, right?