Miscellaneous

Disable IPv6:

sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1

Limit cron/at access. Check for rootkits:

sudo apt install rkhunter chkrootkit
sudo rkhunter --check