Failed Attempts to Log into my Synology NAS

[Lee]

Hi, not sure if this is the right section or not.....anyway, my Synology NAS (running latest version of DSM (6.2.2-24922 Update 4)), has alerted me to some failed login attempts on the "admin" account. The "admin" account is disabled. When I look at the source IP addresses (there have been several attempts over the last 2 days), they originate from China.

Should I be concerned about the security of my NAS or anything else on my network ?

 

[Lee]

Hi @randal , yes I have the relevant ports forwarded via my Virgin Hub 3 for the DSM photo, file, drive and video services so that I can access them from anywhere. There are some port forward rules that have been added by UPnP on the router and I'm not sure what these are......should this worry me ?

edit.....bizarrely after refreshing these other port forward rules seem to have disappeared.....(maybe old cached info ??)....and no other externally facing services at the moment...although I have dabbled with that in the past

 

[Lee]

So, yes, the management interface on the NAS is an HTTPS web server. It's open to the outside world so that I can stream my media whenever I want and access the Photo collection. Thanks for the advice. There is a 2FA capability, so I'll probably enable that.