- have a firewall and configure services on a needed basis. - move sshd to other than port 22, there will still be brute forcers but it will keep the spam down

- have a firewall and configure services on a needed basis. - move sshd to other than port 22, there will still be brute forcers but it will keep the spam down in the log. You can have .ssh/config with your hostname and that set port, so you don't always have to ssh hostname -p 23456. - speaking of sshd, fail2ban is useful - contabo.com has cheap vps Apart from that, what's there to say. I can't think of anything right now.