1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

ovpn-server1 log entries - intrusion attempts?

Discussion in 'Asuswrt-Merlin' started by BGood, Sep 15, 2018.

  1. BGood

    BGood New Around Here

    Joined:
    Mar 25, 2018
    Messages:
    5
    I'm seeing lots of ovpn-server messages in my logs recently. I don't recall seeing similar ones before. I have temporarily stopped the VPN server because I don't need it right now. Before turning it off, I did verify that I could successfully connect to it from outside my home.

    Is someone attempting to connect to my home network via VPN? Is it likely to be innocuous? Malicious? If malicious, how much should I care?

    Thanks



    Sep 15 11:37:04 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:62548, sid=6a22eb44 5adb63fe
    Sep 15 11:37:05 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:36224, sid=6a22eb44 5adb63fe
    Sep 15 11:37:05 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from
    Sep 15 11:37:33 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:12364, sid=6a22eb44 5adb63fe
    Sep 15 11:37:33 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:54371, sid=6a22eb44 5adb63fe
    Sep 15 11:37:34 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:16300, sid=6a22eb44 5adb63fe
    Sep 15 11:37:34 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from
    Sep 15 11:37:58 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:61211, sid=6a22eb44 5adb63fe
    Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS handshake failed
    Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:38:08 ovpn-server1[10811]: 212.22.93.26 TLS: Initial packet from [AF_INET6]::ffff:212.22.93.26:2302, sid=6a22eb44 5adb63fe
    Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:38:53 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:38:53 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:38:56 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:37773, sid=6a22eb44 5adb63fe
    Sep 15 11:38:56 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:24097, sid=6a22eb44 5adb63fe
    Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS handshake failed
    Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:15 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:15 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:17 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:24984, sid=6a22eb44 5adb63fe
    Sep 15 11:39:17 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27778, sid=6a22eb44 5adb63fe
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    restarting
    Sep 15 11:39:32 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:58833, sid=6a22eb44 5adb63fe
    Sep 15 11:39:32 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:18547, sid=6a22eb44 5adb63fe
    Sep 15 11:39:38 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27788, sid=6a22eb44 5adb63fe
    Sep 15 11:39:38 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:4968, sid=6a22eb44 5adb63fe
    Sep 15 11:39:39 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27224, sid=6a22eb44 5adb63fe
    Sep 15 11:39:39 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:6778, sid=6a22eb44 5adb63fe
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:46 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:38000, sid=6a22eb44 5adb63fe
    Sep 15 11:39:46 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:11109, sid=6a22eb44 5adb63fe
    Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
    Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS Error: TLS handshake failed
    Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 SIGUSR1[soft,tls-error] received, client-instance restarting
    Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS: Initial packet from [AF_INET6]::ffff:188.165.45.101:443, sid=6a22eb44 5adb63fe
    Sep 15 11:40:00 rc_service: httpds 397:notify_rc stop_vpnserver1
     
  2. Please support SNBForums! Just click on this link before you buy something from Amazon and we'll get a small commission on anything you buy. Thanks!
  3. M@rco

    [email protected] Very Senior Member

    Joined:
    Dec 23, 2017
    Messages:
    533
    Location:
    /tmp
    Try switching to a non default port. If you already have a non default port, could it be your remote client is still trying to connect?
     
Please support SNBForums! Just click on this link before you buy something from Amazon and we'll get a small commission on anything you buy. Thanks!