SSH Port 22 open with 2.3.0.32

[AF1E]

Port 22 is open for external inbound traffic on 2.3.0.32.  How do I close it?  Blocking the service does not work.

I am getting a slew of messages like the following from my NAS 

"The IP address [80.21.111.26] experienced 2 failed attempts when attempting to log into SSH running on xxxx_Plex within 5 minutes, and was blocked at Sat Mar  9 04:11:24 2019."

[schumaku]

Service blocking is (silly but true) to limit the access to services on the Internet.

Well possible, your Orbi has UPnP PMP active, and your NAS does make use of UPnP PMP to forward the port on it's own. Check the Automatic Router Configuration or however it's named on your undefined NAS.