Interpreting Messages from SSH about security cracking attempts?

[vgaetera]

Yikes! - fw3 defaults to allowing NAT forwards

It's best to not expose Dropbear/uHTTPd to the internet if you really care about security. That's because a single critical vulnerability could be enough to grant root privileges to the attacker.