Changing the default port takes a lot less effort than finding and using a country-level block list, and is just as effective in cutting down intrusion attempts.