Just some data from my end as I didn’t lose any data.
- UPnP is enabled on my router
- Remote access was enabled, but set to “manual” mode. I manually set up port forwarding on my router.
- Auto Update was disabled
- did not lose data
- FTP Service was enabled
- Didn’t change the device name
- DID change the root password.
- I’ve unplugged my My Book Live so I can’t check the firmware, but it was back from 2015 or 2016.
- My router doesn’t respond to pings or anything on non-open ports.
Coincidentally I just recently backed up all the data on the drive to an external USB drive. It literally took nearly a week of continuous copying to do that. While the NAS is convenient, it was so slow as to nearly be unusable.
Prior to unplugging it, I checked my router and there were no outbound or inbound connections to the drive, which is how I like it. That’s one of the reasons I didn’t use “automatic” remote access.
On a side note, with “Automatic” remote access enabled, the drive may decide to use WD’s cloud servers are an access router. Even when set up manually, the drive maintains a DDNS which allows accessing the drive remotely by name. I feel I was just lucky that I didn’t get scanned by whomever did this.