I have examined the log conexions and I can see my conexion and also an unknown root user conexion with protocol 'misc' and IP 51.89.70.84 (or 51.68.183.111, etc) and also a different ssh conexion with IP 222.186.42.75 . I have seen in previous discussion that the reason for the root conexion could be the use of ReadyCloud or similar services, but I am not using any service or app in the readynas server.
I had activated the ssh conexion but after seen the ssh conexion I have disabled it and I have changed the password of the nas.
Could anyone tell me what the origen of these root conexions is? any help will be very appreacited.
Are you forwarding any ports from your router to the ReadyNAS?
222.186.42.75 is in China. https://db-ip.com/222.186.42.75 gives it a "high" threat level, and says it will attack via ssh and "web". That's not a site I've used before, so I don't have any real experience with it.
The other two you list appear to be in Europe (per the same site).
