content: also use ssh keys instead of a password and rotate they keys every so often. Blocking chinese IP range in your firewall is a good idea as well. Keep all software that opens remote ports up to date and stay up to date with any exploits found in software you use on a server the public can connect to.