constant auth attempts from random ips hitting your ssh port will eventually lock you out or exhaust resources. i’d check /var/log/auth.log to see the noise. adding fail2ban filters at the perimeter keeps the log clean and the node focused.
GitHub
sovereign-linux-tools/guides/fail2ban.md at main · shadowbipnode/sovereign-linux-tools
Practical guides for sovereign, private, and self-hosted Linux setups. Encryption, node operation, key management, network hardening. - shadowbipno...