I woke up this morning and noticed the connected user icon illuminated. I checked the status page and it showed a "server" type connection from 222.175.199.226 This ip shows up as a china origin hacking/bruteforce/port scanner on a reporting website. And now even stranger it has erased its entry...