Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.
Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).
https://thehackernews.com/2022/04/qnap-advises-to-mitigate-remote-hacking.html
/Bingo
I'd like to think no-one has an AFP server exposed to the internet. But....