PMS Version : 1.16.5.1554
QNAP : TS-453 Pro
Problem : ‘Login Failure’ messages in QNAP security logs from external IP address. This message only arises when someone tries to log into the QNAP server administration via a browser.
My configuration. The router has uPNP disabled. There is a port forwarding rule that forwards traffic into my selected PMS port (#####) to port 32400 on the internal (NAT) address of the QNAP sever running PMS.
The PMS server is configured to allow remote access with the external port (#####) specified.
Okay, so far, so good, the remote access to Plex works. But after a few days I got the ‘Login Fail’ messages in the QNAP systems log from the external IP address (from Russia - where else)
Somehow, access to the QNAP web admin page from an external address is being facilitated through port ##### (a number that is greater than 32400 and less than 65535). Does anyone know how this can happen as it represents a security risk to my system. In the meantime, I have blocked remote access.
Fortunately the hack attempt was unsuccessful. The access password is extremely long and varied. I would rather, however, that the QNAP login page could not be access from an external address.
Comments and advice would be greatly appreciated.