I had the ports open from my second router, to monitor the rigs while I was adding a new router with 4G support for redundancy, and was still configuring ports for my Personal VPN through the mobile network, when the alarm set of.
I had different attacks from China and Russia over the last week, but today was directly to the mining port, scanning and trying to reboot. Thankfully I am on a simple dynamic IP setup so I can easy change IP with a simple restart.