Using a non-standard port for SSH doesn't make it safer but it greatly reduces noise in your logs. If you only use it yourself, change the port.

For security monitoring I'll throw Wazuh in the room. There's a room right recent video from John Hammond on the subject.