Log says admin remote login from ip 10.119.149.174 with admin logout a minute later. password had been changed on initial setup. Should I be concerned?
10.119.149.174 is an unroutable (private) address. does your ISP router provide a 'public' wireless interface (like the default for comcast boxes to provide xfinity wifi)?
perhaps one of your access devices was connected to that instead of your internal wireless network when you accessed the NVR...
Could be that your mobile provider doesn't show its IP in this case, but not sure. I know my provider (Verizon) displays a correct external IP when I use my mobile to connect. I get attempted connections to my BI server all the time from outside addresses from China, Netherlands, even Chicago that are not mine. If you are worried about it though, just close off the ports in your router to your DVR and run a VPN to gain access to it.
pptp I believe. Samba enabled.Did you set it for PPTP or OpenVPN?
now you configure your mobile devices to have a VPN Connection to your router when they are away-from home.. there are VPN Clients built into all smartphones, go look at security settings.