Not only that, wireguard doesn't even reply if they don't have the right key, while SSH does so the attacker knows there is at least a target.