https://paste.osmc.tv/yijowoyoce
I do have ssh open but osmc is running on a private IP, sshd on 22, but there is no rule to forward to 22 - I have a high random port that is being translated/redirected to port 22. There is no evidence of someone logging in from the internet:
osmc@osmc:~$ last
root pts/0 192.168.1.60 Sat Jun 23 20:56 still logged in
root pts/0 192.168.1.60 Sat Jun 23 20:01 - 20:31 (00:30)
root pts/0 192.168.1.60 Sat Jun 23 19:59 - 20:00 (00:01)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 still running
root pts/0 192.168.1.60 Thu Jun 21 23:33 - 23:34 (00:00)
root pts/0 192.168.1.60 Wed Jun 20 19:35 - 19:38 (00:02)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 still running
root pts/0 192.168.1.60 Wed Jun 20 19:05 - down (00:29)
root pts/1 192.168.1.60 Wed Jun 20 18:54 - down (00:40)
root pts/0 192.168.1.60 Wed Jun 20 18:53 - 19:05 (00:12)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 - 19:35 (17702+17:35)
root pts/0 192.168.1.60 Wed Jun 20 18:41 - down (00:11)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 - 18:52 (17702+16:52)
osmc pts/0 192.168.0.118 Wed Jun 20 18:35 - 18:35 (00:00)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 - 18:35 (17702+16:35)
reboot system boot 4.14.34-2-osmc Thu Jan 1 01:00 - 13:29 (17691+11:29)