Better solution: require VPN connectivity and don't expose SSH on any port to the public Internet. Running services on non-standard ports will make the next ad

Better solution: require VPN connectivity and don't expose SSH on any port to the public Internet. Running services on non-standard ports will make the next admin that takes over this server want to track you down and smother you in your sleep.