Limit failed login attempts
Disallow empty passwords
Limit connections
Update to latest OpenSSH