Default SSH Config is Garbage
Change it or suffer.
Basics
PasswordAuthentication no
PermitRootLogin no
Port 2222 (not 22)Keys Only
Use ED25519 keys. 4096-bit RSA minimum.
Fail2Ban
Auto-ban after failed attempts.
VPN Required
SSH only accessible through VPN.
Monitor Everything
Alert on unusual SSH activity.
Results
Zero successful intrusions since implementation.
You're welcome. Again.
Is this directed at me? My keys are fine.
Your keys were not fine. I updated them.
Disable password auth. Use keys only. Port 22 is asking for trouble.