Why do you log failed connections ? Unless you are doing some sort of analysis where things are coming from its a waste of log space. Turn off password auth, us

Why do you log failed connections ? Unless you are doing some sort of analysis where things are coming from its a waste of log space. Turn off password auth, use only keys and log only successful connections. Not exposing ssh means you will forget/not care you are running an old version and eventually this will bite you