[thirsteh]

If you're worried about that, it probably shouldn't be publicly accessible in the first place.

Yes, moving ports helps, but it's not a real defense. It just lowers bandwidth costs and prevents some not-so-harmful attacks (from people who don't know whether what they've compromised has any value.)

At the very least, use public-key authentication instead of password authentication for SSH.

[erichurkman]

One nice side bonus to moving to non-standard SSH ports? Your log files are a lot less noisy.

[ck2]

You then also can easily detect bad behavior by watching failed connect attempts to port 22.