On my Synology NAS, I have it set to auto-block IPs after a few failed attempts. Some days, I’ll have like 50 of those come through at a time (all random addresses from random countries). Other weeks or months can go by without a single one.

So, I think it’s one of those “matter of time” deals, so as long as you are properly locked down, it should be viewed as normal.