Hacked- network accessed from WAN

[jcbw13196]

Greetings!
I am hoping someone on this forum can help me understand what went wrong.
I recently set up a PC at home for my security camera system, the system runs windows 10 and a DVR application. The network is connected to an ASUS-RTAC68U, which is in turn connected to a Comcast modem. Since I want to monitor the cameras remotely, I set up a VPN because I do not want to deal with security issues related to port forwarding. In order to get it to work I had to bridge the Asus and the Comcast modem (I use the DDNS service built inside the ASUS router.)

.

I use OPENVPN on my iphone and it worked great for a few days. I MUST have done something wrong because last night I was no longer able to connect via VPN (while I was away from home)- when I got back home I found out that my VPN settings had changed and the login/passwords were changed. I downloaded the log from the router (see attached).
I replaced the "intruder's" IP address with "RUSSIANIP" and I replaced mine with "MYIP".

Since then I have made the following changes to the ASUS configuration:
1. Disabled SSH
2. Disabled UpnP
Any idea on what happened based on the log? I would like to understand what the hacker did? I have been studying this forum and found it very helpful but I am a newbie & I really need help/guidance. Any help would be greatly appreciated... What can I do to improve the security of my firewall?

 

[ColinTaylor]

Your screenshots are too small to read and you don't say what version of the firmware you are running.

But going by the build dates in your log it looks like you're running a very old firmware version. These old firmwares are known to be hackable, especially if you have turned on the "Enable Web Access from WAN" option on the router.

 

[jcbw13196]

I upgraded to:3.0.0.4.384_32799 the latest, but I didn't write down what version I was running previously and I cannot seem to get it from the log file.

Here are new screenshot- I have made the following changes to the ASUS configuration (not reflected in screen shots below):

1. Disabled SSH

2. Disabled UpnP

3. Disabled all NAT pass through

Enable Firewall: YES
ENABLE DOS Protection: YES
RESPOND ICMP Echo ping : No
Enable ivp6 Firewall: Yes