Login attempt or request with invalid authentication from [my public ip]

Running HA in docker on a Synology behind the Synology Nginx reverse-proxy (DSM7) with Lets Encrypt certificate.

I can access fine via https:xxxx.synology.me or locally as http://192.x.x.x:8123. BUT I get notifications logged literally every second to the effect that “Login attempt or request with invalid authentication from [my public IP address (68.x.x.x).] See the log for details.”

But if turn off the reverse proxy (just removing HA from it) the login attempts stop (but of course I can’t access via https and my ddns address).

I see no adverse effects…but this can’t possibly be good. Any ideas as to the culprit (actually, that’s me–any ideas as to the means of my crime)?

And the log:

Source: components/http/ban.py:124
Integration: HTTP (documentation, issues)
First occurred: 4:41:24 PM (1337 occurrences)
Last logged: 5:39:58 PM

Login attempt or request with invalid authentication from xxxxxx.dyn.optonline.net (68.xxx.xxx.xxx). (None)

Why not use a VPN server on your nas? Makes all a lot more secure.

its the money