Any time I’ve ever had a server of any kind connected to the net it’s gotten endless ‘doorknob turning’ from bots scanning for stuff. At the very least, bots trying ssh passwords on common accounts.

I don’t have any specific jellyfin advice, but random attempts from all over is pretty usual on the net these days.