question about unauthorized access attempts

[gollux]

I noticed today that my Qnap NAS has quite a few failed attempts to log in to the NAS. I have attempted to secure the NAS in the past, but I am concerned that there may be something that I had missed. (For instance, the attempts come via https, but I thought I had disabled remote https access.) I have two questions:

1) Can someone recommend a good guide for recommended steps to secure a Qnap NAS? (I want to check to see whether I have done everything necessary.)

2) How can I tell whether my NAS has been compromised?

Thanks!

[dolbyman]

disable upnp on the router and check that there is no manual forwards to your nas

without those, there should be no more login attempts

install malware remover to check if nas was compromised

[gollux]

Thanks, dolbyman. I did notice that I had upnp enabled on the router, and it's off now. Malware remover comes up clean!

Thanks for your help.

[chrispeddler]

disable upnp on the router and check that there is no manual forwards to your nas

without those, there should be no more login attempts

install malware remover to check if nas was compromised

I also had the same problem. Good thing I found your solution. Will do try as well. Thanks!