[Krasnol]

I've set up a second obstacle by allowing access to the device from a certain range of IPs on the router. Cleaned up the log pretty good.

[seldomcomment]

logins can be delayed [0] and TOTP can be used in conjunction with SSH (without google authenticator)

[0] https://unix.stackexchange.com/questions/105553/how-to-provi...

edit:

quick and dirty notes of my setup [1]

[1] https://pastebin.com/yYzSrM61