Strange 12 hourly probe on my ASUS OpenVPN Server

[LimJK]

Hi,

I have starting to use ASUS OpenVPN Server only recently.

As I was looking at my logs and I noticed something strange that will happen about every 12 hours from IP address in the range of 185.200.118.xx. The following is one example:

• Jul 21 06:05:28 vpnserver1[732]: 185.200.118.42:40191 TLS: Initial packet from [AF_INET]185.200.118.42:40191 (via [AF_INET]116.87.159.239%eth0), sid=12121212 12121212
• Jul 21 06:06:28 vpnserver1[732]: 185.200.118.42:40191 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
• Jul 21 06:06:28 vpnserver1[732]: 185.200.118.42:40191 TLS Error: TLS handshake failed
• Jul 21 06:06:28 vpnserver1[732]: 185.200.118.42:40191 SIGUSR1[soft,tls-error] received, client-instance restarting

I recalled that during my initial setup I was having trouble with ASUS DDNS, so I started signing up to a few Free DDNS Service provider including: No-IP, DNSdynamic, yDNS with DNS-o-Matic. I have since go back to ASUS DDNS.

Questions:

• Should I be concern?
• What can I do?

Thanks for any guidance.

 

[kfp]

- Regular Internet noise (scanners)
- Move OpenVPN to a random high port instead of 1194

 

[ColinTaylor]

https://www.snbforums.com/threads/ac3100-380-70-block-incoming-ip.47001/

 

[LimJK]

- Regular Internet noise (scanners)
- Move OpenVPN to a random high port instead of 1194

kfp,
Thanks, I will treat it as Regular Internet noise

 

[LimJK]

https://www.snbforums.com/threads/ac3100-380-70-block-incoming-ip.47001/

ColinTaylor,
Thank you for pointing me to the thread ...

 

[LimJK]

https://www.snbforums.com/threads/ac3100-380-70-block-incoming-ip.47001/

ColinTaylor,
Thanks for the very interesting thread. Since I need AiMesh for my home environment, I can only use Stock FW. Script is only supported on Merlin's FW

 

[ColinTaylor]

Moving to a non-standard port will cut out >99% of the "noise".

 

[LimJK]

Moving to a non-standard port will cut out >99% of the "noise".

ColinTaylor,
Thanks ... I have changed to a non-standard port

 

[LimJK]

- Regular Internet noise (scanners)
- Move OpenVPN to a random high port instead of 1194

Moving to a non-standard port will cut out >99% of the "noise".

Kfp & ColinTaylor,

Thank you ... after changing to a non-standard port, the strange 12 hourly probe seem to have stop for the first time

 

[robahearts]

Hi,

I recalled that during my initial setup I was having trouble with ASUS DDNS, so I started signing up to a few Free DDNS Service provider including: No-IP, DNSdynamic, yDNS with DNS-o-Matic. I have since go back to ASUS DDNS.

/QUOTE]

Hi there. I've used duckdns.org for the longest and it works fine. You should give it a try.

 

[LimJK]

Thanks, I will keep that in duckdns.org mind the next time ... I am currently quite happy with ASUS DDNS service for now for my simple requirement