Is your IP address exposed directly to the internet?
If so, adding a simple NAT router for hour home/office LAN is a good first line of defense.
If you are running on wireless in an apartment, condo, etc., you’ll need to secure that as well.
Have you changed your default password settings in the shell?