https://www.reddit.com/r/selfhosted/comments/14qsq9x/securing_your_vps_the_lazy_way/
As soon as you get acces to your VPS you should add your key and disable password authentication. It's MUCH more secure than password ...

https://help.ovhcloud.com/csm/en-vps-security-tips?id=kb_article_view&sysparm_article=KB0047703
Updating your system - Changing the default SSH listening port - Creating a user with restricted rights - Configuring the internal firewall ( ...

https://www.accuwebhosting.com/blog/how-to-secure-windows-vps/
The easiest solution for securing Windows VPS is to change the default port. This way, your VPS is prevented from such attacks and abuse of server resources.