Miah Johnson on Nostr: If you never SSH to your server from outside of your country of residence, there is ...

If you never SSH to your server from outside of your country of residence, there is nothing bad about filtering every other countries IP space from accessing your SSH server.

Move it to a non-standard port. Trip-wire other ports such that if they are accessed the source IP gets blocked from further attempts.

Disable password based authentication.

Move ssh to localhost and require wireguard to access..

These are all viable ways to protect yourself. The more hoops to jump through the better.