> IME, moving ssh off the standard port reduces bot scanning traffic by >99%.

Depends on the site I expect. My low value domains get NO ssh attempts on my random ports. The high value ones get a few each week.