3 ms·

Thanks for the suggestions. Yes, I checked /var/log/auth.log and I saw some strange IPs trying to ssh as root. Good idea to change the ssh port.