09-22-2018, 07:00 PM
Mostly what everyone says here - Disable password and implement ssh key only login. Change port to something random from 22, then use ufw to block all ports except 80 and 443. That will do but remember its not guaranteed still that it will be safe from botnets.