Don't even the most simplistic bots perform port scans to discover your services anyway? err...sortof. They're just looking at port numbers and cross referenc

Don't even the most simplistic bots perform port scans to discover your services anyway? err...sortof. They're just looking at port numbers and cross referencing that to services that are known to live on those ports. Changing the port that SSH listens on isn't going to stop somebody from performing this exploit against one of your machines, it IS going to prevent you from getting auto-rooted by a bot that goes around looking for machines that ack on port 22. Think of it like a hidden door, but on the front of your house. To the casual observer driving through the neighborhood, they won't see it. To somebody actively trying to find a way into your house...you're going to need more.