That&#x27;s a somewhat obsolete belief – people have been scanning arbitrary ports for many, many years and SSH daemons helpfully announce themselves to search engines:<p><a href="https:&#x2F;&#x2F;www.shodan.io&#x2F;report&#x2F;uMZDnWfT" rel="nofollow">https:&#x2F;&#x2F;www.shodan.io&#x2F;report&#x2F;uMZDnWfT</a><p>This is a long-running problem and one with various popular solutions: restrict the source networks which you accept traffic for, disable password authentication entirely, and add some sort of rate limiting (e.g. 2004&#x27;s fail2ban) for failures. Trying to reduce log volume by obscurity is futile - you really need to address the root problem and use tools which allow you to filter and aggregate effectively.