Thanks for sharing the data, This unpredictability and everything is even more suspicious.
Thoughts on having an ssh server with https://github.com/charmbracelet/soft-serve instead?