How to Secure SSH on a Fresh VPS in 10 Minutes (Keys, Firewall, Fail2ban)

Disclosure: I run Buran.host, a VPS hosting service. The steps below work on any Debian or Ubuntu server, no matter where it is hosted. A new VPS is scanned by bots within minutes of getting a public