After first login:
• Update packages (apt/yum update)
• Create a sudo user; disable root SSH password if using keys
• Configure firewall (allow SSH first)
• Fail2ban or similar for SSH
• Keep panels/apps patched
Compromised servers may be suspended for abuse.