How to protect yourself from SSH attacks?

Question

System administration

I installed fail2ban, it doesn't help much, VPS are still attacked. The port also changed.

Answer 1

What exactly do you mean by protection?
Do you need the attacks to stop completely? If so, then the only way is to disable SSH access.
If you need to prevent attacks from succeeding, then what is wrong with fail2ban ?

Answer 2

The main thing: Entry _only_ by keys.
Then you can fail2ban, restrict access to certain IPs, change the port.
Well, this is always the case, if ssh or, for example, asterisk hangs outside, bots will immediately run into it.

Answer 3

and if you allow access only from 1-3 of their addresses? or use port-knoking?

Answer 4

port-knoking + country IP

Answer 5

strong password(20+characters) + fail2ban or csf should be enough