[egwor]

First step is to get ssh setup correctly, and second step is to enable a firewall to block incoming connections on everything except the key ports (ssh but on a different port/web/ssl). This immediately eliminates a swathe of issues!

[bornfreddy]

Also use fail2ban. If nothing else to decrease the amount of junk in logs.