Also its worth mentioning most hacking is fairly low effort. If you're using port knocking or non-standard ports you're avoing 99.9999999% of attacks and scans

Also its worth mentioning most hacking is fairly low effort. If you're using port knocking or non-standard ports you're avoing 99.9999999% of attacks and scans by default. As part of a comprehensive security plan I have no problem with it. I dont deploy any linux servers with ssh listening on 22 nor without fail2ban. Unfortunately, because of the vendors we use things like mandatory VPN or ssh keys only aren't in the cards.