Ask HN: Can you help me securing my droplet?

I have a 20 dollars droplet on digital ocean that I use to host my website, apps and lately some small LLMs. I've been working on an app that is basically a wrapper around ollama with some custom features. I sent the link to one of my professors (who also teaches security) and I think some grads students are running a scanner on my VPS.

I've configured fail2ban with some default and custom rules to block the IPs, but they are relentless. Is there anything more I should be doing?

this is how my `iptables -S` looks like: https://victorribeiro.com/iptables.txt

this log is just from today - fucking script kiddies