Port 22

Your web application firewall should be more than a firewall it should be a noise filter too