This is pretty normal for ANY device connected to the internet. I configure all my servers (including my synology box) to only allow ssh logins from certain IP addresses.
I had sever running on a bare ip on AWS address that was never publicised and only ran ssh and a custom node.js server I saw tones of dodgy attempts from Russian and Chinese ip.
