You probably already do, but if you need SSH, use crowdsec, SSHGuard or fail2ban to help filter bot nets.

I have IPs hitting from all over the world, trying logins all the time. Like several per minute, I can only imagine what it would be like if I wasn’t blocking IPs with multiple failed login attempts.