Serious, I shifted my port for ssh several years ago. I have yet to see a failed attempt that wasn't a legitimate user who screwed up since I changed. Sure, I know that someone could be port scanning and stuff, but really, I just don't see it happening.

Credit Card Companies are already paranoid enough about new businesses. When you are a Legit business trying to sell a Legit product and you do large business the Credit Card companies shut you off if your business goes in spurts and such. It is bad to have the Credit Card Companies have several false positives because you've tried to turn them into an investigative police force rather then a funds collector.