SSH Hardening Checklist

Key-only auth, non-standard ports, fail2ban — the basics that stop most automated scanners.