The Droplet Console uses SSH but does not support the latest SSH crypto config. This makes it difficult to lock a droplet down to only accept specific ciphers (which helps reject bot scans, though fail2ban is involved as well). The required crypto config for the Console is also not documented anywhere so it takes trial-and-error to get a minimal-but-acceptable configuration. This includes the Ciphers, KexAlgorithms, and Macs parameters for OpenSSH.