What's new

ovpn-server1 log entries - intrusion attempts?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

BGood

Regular Contributor
I'm seeing lots of ovpn-server messages in my logs recently. I don't recall seeing similar ones before. I have temporarily stopped the VPN server because I don't need it right now. Before turning it off, I did verify that I could successfully connect to it from outside my home.

Is someone attempting to connect to my home network via VPN? Is it likely to be innocuous? Malicious? If malicious, how much should I care?

Thanks



Sep 15 11:37:04 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:62548, sid=6a22eb44 5adb63fe
Sep 15 11:37:05 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:36224, sid=6a22eb44 5adb63fe
Sep 15 11:37:05 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from
Sep 15 11:37:33 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:12364, sid=6a22eb44 5adb63fe
Sep 15 11:37:33 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:54371, sid=6a22eb44 5adb63fe
Sep 15 11:37:34 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:16300, sid=6a22eb44 5adb63fe
Sep 15 11:37:34 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from
Sep 15 11:37:58 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:61211, sid=6a22eb44 5adb63fe
Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS handshake failed
Sep 15 11:38:06 ovpn-server1[10811]: 212.22.93.26 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:38:08 ovpn-server1[10811]: 212.22.93.26 TLS: Initial packet from [AF_INET6]::ffff:212.22.93.26:2302, sid=6a22eb44 5adb63fe
Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:38:34 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:38:53 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:38:53 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:38:56 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:37773, sid=6a22eb44 5adb63fe
Sep 15 11:38:56 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:24097, sid=6a22eb44 5adb63fe
Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:38:58 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 TLS Error: TLS handshake failed
Sep 15 11:39:08 ovpn-server1[10811]: 212.22.93.26 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:15 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:15 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:17 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:24984, sid=6a22eb44 5adb63fe
Sep 15 11:39:17 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27778, sid=6a22eb44 5adb63fe
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:20 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
restarting
Sep 15 11:39:32 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:58833, sid=6a22eb44 5adb63fe
Sep 15 11:39:32 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:18547, sid=6a22eb44 5adb63fe
Sep 15 11:39:38 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27788, sid=6a22eb44 5adb63fe
Sep 15 11:39:38 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:4968, sid=6a22eb44 5adb63fe
Sep 15 11:39:39 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:27224, sid=6a22eb44 5adb63fe
Sep 15 11:39:39 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:6778, sid=6a22eb44 5adb63fe
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:42 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:43 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:46 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:38000, sid=6a22eb44 5adb63fe
Sep 15 11:39:46 ovpn-server1[10811]: 200.229.202.176 TLS: Initial packet from [AF_INET6]::ffff:200.229.202.176:11109, sid=6a22eb44 5adb63fe
Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:49 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 TLS Error: TLS handshake failed
Sep 15 11:39:50 ovpn-server1[10811]: 200.229.202.176 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS Error: TLS handshake failed
Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 15 11:39:59 ovpn-server1[10811]: 188.165.45.101 TLS: Initial packet from [AF_INET6]::ffff:188.165.45.101:443, sid=6a22eb44 5adb63fe
Sep 15 11:40:00 rc_service: httpds 397:notify_rc stop_vpnserver1
 
Try switching to a non default port. If you already have a non default port, could it be your remote client is still trying to connect?
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top