[log][spam] incoming connections from behind firewall

apparently for some time my system has been getting the common attempts to log in on port 22 as root what's strange is that my system doesn't to me appear to be publicly accessible. i tried to log in myself, on that port, via a wan ip address, and the connection just hangs. in the system log, the connection attempts have remote ip addresses, as if they are forwarded by the router, rather than a local proxy. bears network diagnostics.