What's new

Help with Merlin Log Entries

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Ydnaroo

Regular Contributor
Hi

I'm using a RT-AC68U running Merlin. I noticed loads of lines like the following in my log yesterday:
Code:
Nov 14 16:35:40 ovpn-server1[11802]: 134.255.229.75 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 14 16:35:41 ovpn-server1[11802]: 134.255.229.75 TLS: Initial packet from [AF_INET6]::ffff:134.255.229.75:9987, sid=6a22eb44 5adb63fe
Nov 14 16:36:41 ovpn-server1[11802]: 134.255.229.75 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 14 16:36:41 ovpn-server1[11802]: 134.255.229.75 TLS Error: TLS handshake failed
Nov 14 16:36:41 ovpn-server1[11802]: 134.255.229.75 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 14 16:47:51 ovpn-server1[11802]: 5.186.121.40 TLS: Initial packet from [AF_INET6]::ffff:5.186.121.40:1323, sid=6a22eb44 5adb63fe
Nov 14 16:48:51 ovpn-server1[11802]: 5.186.121.40 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 14 16:48:51 ovpn-server1[11802]: 5.186.121.40 TLS Error: TLS handshake failed
Nov 14 16:48:51 ovpn-server1[11802]: 5.186.121.40 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 14 16:48:54 ovpn-server1[11802]: 5.186.121.40 TLS: Initial packet from [AF_INET6]::ffff:5.186.121.40:1323, sid=6a22eb44 5adb63fe
Nov 14 16:49:54 ovpn-server1[11802]: 5.186.121.40 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 14 16:49:54 ovpn-server1[11802]: 5.186.121.40 TLS Error: TLS handshake failed
Nov 14

Do these mean that someone is trying to access my VPN or is my system trying to access someone else's?

I turned my VPN off after I noticed these yesterday (rarely used and only by me) and I've not seen any entries in the log since.

Any help in understanding what is going on will be greatly appreciated. Cheers - Andy
 
Do these mean that someone is trying to access my VPN

A port scanner is hitting your OpenVPN server. You can ignore these.
 
A port scanner is hitting your OpenVPN server. You can ignore these.
Thank you very much. Wasn't sure if it was something to worry about. Regards - Andy
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top