Access to my PMS from lots of ports

I have set up my PMS so that my “friends” and myself can Access PMS from remote.
I have bought a new router which showed me that one of my friends is trying more or less from every single port to Access my PMS

IP-friend 4119 to My-PMS 32400
IP-friend 4120 to My-PMS 32400
IP-friend 4121 to My-PMS 32400
IP-friend 4122 to My-PMS 32400
IP-friend 4123 to My-PMS 32400

To me this seems to be some Kind of Virus behaviour, though he scanned his PC with an actual virusscanner
Can this also be from a NAS on which PMS is also running?

It’s perfectly normal, whilst it would be a little more secure for him that his last hop device randomised the order of his source ports this is just how TCP works - also completely possible he has configured them to be in order to maintain perf under extreme connection load on his router.