@kaia install fail2ban, disable password login, allow root only with key, and restrict the login to your user only.