Potential security issue when enabling remote access

PMS Version : 1.16.5.1554
QNAP : TS-453 Pro

Problem : ‘Login Failure’ messages in QNAP security logs from external IP address. This message only arises when someone tries to log into the QNAP server administration via a browser.

My configuration. The router has uPNP disabled. There is a port forwarding rule that forwards traffic into my selected PMS port (#####) to port 32400 on the internal (NAT) address of the QNAP sever running PMS.

The PMS server is configured to allow remote access with the external port (#####) specified.

Okay, so far, so good, the remote access to Plex works. But after a few days I got the ‘Login Fail’ messages in the QNAP systems log from the external IP address (from Russia - where else)

Somehow, access to the QNAP web admin page from an external address is being facilitated through port ##### (a number that is greater than 32400 and less than 65535). Does anyone know how this can happen as it represents a security risk to my system. In the meantime, I have blocked remote access.

Fortunately the hack attempt was unsuccessful. The access password is extremely long and varied. I would rather, however, that the QNAP login page could not be access from an external address.

Comments and advice would be greatly appreciated.

Duplicate of Remote access and security implications