Linux Hardening
Tips
SSH
only via pubkey
deactivate root login
move to different port to filter out noise
Resources / Lists
The Practical Linux Hardening Guide
Linux Hardening Checklist