Keeping SSH access tidy
Most of the noise in an SSH log comes from automated password guessing. Turning off password logins removes the whole category.
PasswordAuthentication no PubkeyAuthentication yes PermitRootLogin prohibit-password MaxAuthTries 3 LoginGraceTime 20
Keep one extra session open while you test a change, so a typo never locks you out. A non-default port does not add real security, but it keeps the logs readable.