Hacker News Reader

Obscurity doesn't mean undetectable.

Also: you would still need to do a more elaborate (and therefore more "expensive") full range port scan, compared to scanning just the standard ports. That doesn't scale so well for scanning many IP address (e.g. criminals scanning the internet for potential targets).

I suppose your network provider (cloud provider) might have counter measures for port-scanning.

(Personally, I'd prefer use port 22, just because it's less configuration)

Getting a hit on port 22 doesn't mean much. Getting hit by a full port-scan is more of a signal of being specifically targeted though.