If you don't need to support access from arbitrary IPs, IP whitelisting is another good additional layer over SSH. Keeps the SSH scanners out, and also signific

If you don't need to support access from arbitrary IPs, IP whitelisting is another good additional layer over SSH. Keeps the SSH scanners out, and also significantly raises the bar for a determined attacker.