- Install and configure fail2ban like this
- sshd_config: KexAlgorithms [email protected],ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
- sshd_config: Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
- sshd_config: MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]
- sshd_config: PermitRootLogin no
- sshd_config: UseDNS no