---

cd ~
echo '=== fail2ban ==='
sudo fail2ban-client status sshd 2>/dev/null || sudo fail2ban-client status ssh 2>/dev/null
echo '=== hosts ==='
cat /etc/hosts.allow; echo '---'; cat /etc/hosts.deny
echo '=== sshd effective ==='
sudo sshd -T 2>/dev/null | grep -E 'allowusers|denyusers|passwordauthentication|maxstartups|listenaddress|usepam|banner'
echo '=== last auth ==='
sudo tail -40 /var/log/auth.log
echo '=== listen ==='
ss -lntp | grep ':22'