Should I Worry?

[SaveMyRouter]

May 18 01:56:42 pptpd[3981]: CTRL: Client 175.4.255.3 control connection started
May 18 01:56:45 pptpd[3981]: CTRL: Starting call (launching pppd, opening GRE)
May 18 01:56:46 pptp[3982]: Plugin pptp.so loaded.
May 18 01:56:46 pptp[3982]: PPTP plugin version 0.8.5 compiled for pppd-2.4.7, linux-2.6.36.4
May 18 01:56:46 pptp[3982]: The remote system is required to authenticate itself
May 18 01:56:46 pptp[3982]: but I couldn't find any suitable secret (password) for it to use to do so.
May 18 01:56:46 pptpd[3981]: CTRL: Client pppd TERM sending
May 18 01:56:46 pptpd[3981]: CTRL: Client pppd finish wait
May 18 01:56:51 pptpd[3981]: CTRL: Client 175.4.255.3 control connection finished


May 19 02:45:20 pptpd[7414]: CTRL: Client 139.162.102.46 control connection started
May 19 02:45:20 pptpd[7414]: CTRL: EOF or bad error reading ctrl packet length.
May 19 02:45:20 pptpd[7414]: CTRL: couldn't read packet header (exit)
May 19 02:45:20 pptpd[7414]: CTRL: CTRL read failed
May 19 02:45:20 pptpd[7414]: CTRL: Client 139.162.102.46 control connection finished


May 19 05:54:00 pptpd[7858]: CTRL: Client 139.162.102.46 control connection started
May 19 05:54:00 pptpd[7858]: CTRL: EOF or bad error reading ctrl packet length.
May 19 05:54:00 pptpd[7858]: CTRL: couldn't read packet header (exit)
May 19 05:54:00 pptpd[7858]: CTRL: CTRL read failed
May 19 05:54:00 pptpd[7858]: CTRL: Client 139.162.102.46 control connection finished


May 19 07:31:53 pptpd[697]: MGR: initial packet length 18245 outside (0 - 220)
May 19 07:31:53 pptpd[8060]: CTRL: Client 113.96.223.207 control connection started
May 19 07:31:53 pptpd[697]: MGR: initial packet length 20304 outside (0 - 220)
May 19 07:31:53 pptpd[697]: MGR: dropped small initial connection
May 19 07:31:53 pptpd[697]: MGR: initial packet length 17231 outside (0 - 220)
May 19 07:31:53 pptpd[697]: MGR: initial packet length 768 outside (0 - 220)
May 19 07:31:53 pptpd[697]: MGR: initial packet length 4609 outside (0 - 220)
May 19 07:31:53 pptpd[8060]: CTRL: EOF or bad error reading ctrl packet length.
May 19 07:31:53 pptpd[8060]: CTRL: couldn't read packet header (exit)
May 19 07:31:53 pptpd[8060]: CTRL: CTRL read failed
May 19 07:31:53 pptpd[8060]: CTRL: Client 113.96.223.207 control connection finished

 

[DonnyJohnny]

Of coz you should... pptp is known for many security issues... it is just matter of time.
Suggest you use openvpn instead.
Also recommend you to install SkyNet for extra protection from common known ip block list.

 

[SaveMyRouter]

Of coz you should... pptp is known for many security issues... it is just matter of time.
Suggest you use openvpn instead.
Also recommend you to install SkyNet for extra protection from common known ip block list.

Thanks.

However, I did not enable PPTP VPN server. I am actually using OpenVPN.

 

[DonnyJohnny]

Thanks.

However, I did not enable PPTP VPN server. I am actually using OpenVPN.

Seems to me that pptp server is activated. Coz it is trying to establish connection. Maybe can see the process command, “top” to see if pptp service is active. For me I don’t see any pptp process in mine.

This kind of log could sometime happen to me when I open tcp 443 port on my openvpn server but I am sure they can’t establish connection without the cert. But I see internet pptp has lots of securityissues. So I don’t know how secure it is.

In normal situation, maybe router has been compromised and next step is, re-initialize and reflash and re-initialize.

 

[ColinTaylor]

The messages are normal port scanning. But as @DonnyJohnny said it does indicate that the PPTP server is running. So double check your router. Particularly because there were numerous reports of Asus routers being hacked and the PPTP server being activated.

https://www.snbforums.com/threads/possibly-been-hacked-need-assistant-from-senior-users.45597/

 

[SaveMyRouter]

@DonnyJohnny @ColinTaylor Thank you both.

I read through the thread @ColinTaylor posted but didn't find any of those issues.

Anyway, I went ahead and "stopped" PPTP Server as @RMerlin recommended in this following thread by using code "service stop_pptpd"

https://www.snbforums.com/threads/console-cmd-to-start-stop-restart-openvpn-pptp-vpn-server.19946/

I'll monitor the system logs, reinitialize and/or reflash plus reinitialize if necessary.

Update: edit.