In looking at my SSH log in the webgui (Services->SSH) I have found some strange ip addresses that look to have been connecting to my OMV.
I don't know if I have a problem here, so I need some advice. Under Currently logged in users it says: no users connected.
Under connections, it previously showed several connections to (from?) my OMV, as in 192.168.0.0-->117.21.191.207:port. There were four listings with similar Chinese IPs.
Does this mean that my OMV is connecting to this ip, or this ip is connecting to my OMV? Either way, I am concerned, but not sure what it means or what to do about it. It looks like they aren't there at the moment, but when I saw them I was concerned. Help or advice?
EDIT:
I have closed my SSH port which was forwarded through my router, and changed all passwords. Not seeing these ips anymore. What other safeguards should I take since I don't know how long there has been unauthorized access?