Three layer of defense on default Port here.

1. ufw limit ssh.

2. Ansible devsec.hardening.ssh_hardening

3. fail2ban