I have the OpenVPN server enabled on my router, as I use it to connect remotely to my home PC and an USB HDD attached to the router. From time to time I see these entries in the general log (default message log level: notice, log only messages more urgent than: debug):
At the time these messages appear no OpenVPN client is connected, nor is it supposed to try to connect. It looks like someone is trying to log in to my server by guessing (wrongly) the login credentials. The IP addresses are never the same. This issue has been around since a year or two ago, so it's not tied to a specific firmware version or OpenVPN version. I am currently on 380.69_2.
Any thoughts as to what these log messages mean?
Code:
Mar 4 17:53:47 openvpn[2819]: TCP connection established with [AF_INET6]::ffff:46.252.242.189:54240
Mar 4 17:54:03 openvpn[2819]: 46.252.242.189 Connection reset, restarting [-1]
Mar 4 17:54:03 openvpn[2819]: 46.252.242.189 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mar 4 18:22:07 openvpn[2819]: TCP connection established with [AF_INET6]::ffff:46.252.242.189:43560
Mar 4 18:22:22 openvpn[2819]: 46.252.242.189 Connection reset, restarting [-1]
Mar 4 18:22:22 openvpn[2819]: 46.252.242.189 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mar 4 18:30:07 openvpn[2819]: TCP connection established with [AF_INET6]::ffff:176.62.185.145:52200
Mar 4 18:30:23 openvpn[2819]: 176.62.185.145 Connection reset, restarting [-1]
Mar 4 18:30:23 openvpn[2819]: 176.62.185.145 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mar 4 18:57:58 openvpn[2819]: TCP connection established with [AF_INET6]::ffff:176.62.185.145:57739
Mar 4 18:58:14 openvpn[2819]: 176.62.185.145 Connection reset, restarting [-1]
Mar 4 18:58:14 openvpn[2819]: 176.62.185.145 SIGUSR1[soft,connection-reset] received, client-instance restarting
At the time these messages appear no OpenVPN client is connected, nor is it supposed to try to connect. It looks like someone is trying to log in to my server by guessing (wrongly) the login credentials. The IP addresses are never the same. This issue has been around since a year or two ago, so it's not tied to a specific firmware version or OpenVPN version. I am currently on 380.69_2.
Any thoughts as to what these log messages mean?