Comment by harborsong

Highly recommend blocking the ssh port on all public facing instances and machines. Remember the recent xz/ssh backdoor exploit that was discovered.

What if there is another backdoor lurking undiscovered?

Do what I did, only open ssh over a VPN, or at least restrict it to a specific inbound IP or CIDR block under your direct control.