Understanding Security Run Output

[Fiatt]

Hi all.

I received this mail and i'm wondering what it means:

freenas.local changes in mounted filesystems:
10c10
< NASBRICE/JAILS/OPENVPN /mnt/NASBRICE/JAILS/OPENVPN zfs rw,nfsv4acls 0 0
---
> NASBRICE/JAILS/owncloud /mnt/NASBRICE/JAILS/owncloud zfs rw,nfsv4acls 0 0
16c16,17
< freenas-boot/ROOT/default / zfs rw,noatime,nfsv4acls 0 0
---
> devfs /mnt/NASBRICE/JAILS/owncloud/dev devfs rw,multilabel 0 0
> freenas-boot/ROOT/FreeNAS-9.3-STABLE-201502162250 / zfs rw,noatime,nfsv4acls 0 0
17a19
> procfs /mnt/NASBRICE/JAILS/owncloud/proc procfs rw 0 0

freenas.local kernel log messages:
> epair0a: link state changed to DOWN
> epair0b: link state changed to DOWN
> em0: link state changed to DOWN
> em0: promiscuous mode disabled
> bridge0: link state changed to DOWN
> em0: link state changed to UP
> ifa_del_loopback_route: deletion failed
> Freed UMA keg (udp_inpcb) was not empty (80 items). Lost 8 pages of memory.
> Freed UMA keg (udpcb) was not empty (1008 items). Lost 6 pages of memory.
> hhook_vnet_uninit: hhook_head type=1, id=1 cleanup required
> hhook_vnet_uninit: hhook_head type=1, id=0 cleanup required

freenas.local login failures:
Feb 17 06:21:08 freenas sshd[44416]: Failed password for root from 92.90.21.154 port 32577 ssh2
Feb 17 06:21:18 freenas sshd[44416]: Failed password for root from 92.90.21.154 port 32577 ssh2
Feb 17 06:21:56 freenas sshd[44416]: Failed password for root from 92.90.21.154 port 32577 ssh2
Feb 17 06:22:21 freenas sshd[44467]: Failed password for root from 92.90.21.154 port 52642 ssh2

-- End of security output --

Can someone explain me please?

 

[gpsguy]

Among other things, someone from France is trying to login as root.

freenas.local login failures:
Feb 17 06:21:08 freenas sshd[44416]: Failed password for root from 92.90.21.154 port 32577 ssh2

 

[SweetAndLow]

You shouldn't be forwarding any ports to your FreeNAS box! Disable those immediately.

What motherboard and other hardware do you have? Intel nic?

 

[Fiatt]

Ok so that's my first attack. I forwaded a port so i can manage it till i install a vpn (it's not mine and 200km away). And i disabled the ssh root login.
I finished the install yesterday so i will unforward the wan port.

Thanks for answering.