A Stranger Scanned My Server for Three Days, Here Is What I Fixed
Your public server is being probed right now. The hardening checklist I run on every machine, SSH keys and firewalls and CrowdSec and non-root containers, in the order I apply it, before something else finds the gap first.