Securing SSH access is the most critical first step after deploying a fresh Ubuntu Linux server. Fresh installations with default SSH settings are prime targets for automated brute-force attacks and scanning botnets.
Here is a quick checklist to harden your SSH access:
🗝️ Enforce SSH Key Authentication: Disable password logins entirely and use ed25519 key pairs.
🚫 Disable Direct Root Login: Set PermitRootLogin no in /etc/ssh/sshd_config.
🔌 Change Default SSH Port: Switch from default Port 22 to a custom non-standard port to reduce automated scan noise.
🛡️ Configure UFW Firewall: Restrict incoming connections and open only your custom SSH port.
⚡ Deploy Fail2ban: Automatically ban IP addresses that exhibit repeated failed login attempts.
📖 Read the complete step-by-step tutorial with all terminal commands, configuration steps, and best practices on my blog:https://mobilestuff2026.blogspot.com/2026/10/how-to-secure-ssh-access-on-ubuntu.html