Basic Server Security Hardening: SSH, Firewall and fail2ban
A practical walkthrough for hardening a Debian/Ubuntu server: change the SSH port, switch to key auth, disable root password login, enable a firewall, install fail2ban, and keep packages updated.