jan/17 23:44:25 pptp,info TCP connection established from 174.219.2.123
jan/17 23:44:26 pptp,ppp,info,account phone logged in, 192.168.1.251
jan/17 23:44:26 pptp,ppp,info : authenticated
jan/17 23:44:26 pptp,ppp,info : connected
jan/17 23:50:20 pptp,ppp,info : terminating…
jan/17 23:50:20 pptp,ppp,info,account phone logged out, 354 509182 4038732 4061 4469
jan/17 23:50:20 pptp,ppp,info : disconnected
07:25:11 pptp,info TCP connection established from 164.52.6.146
07:25:11 pptp,info TCP connection established from 164.52.6.146
07:25:15 pptp,info TCP connection established from 164.52.6.146
The pptp-phone is me accessing the network, but then all the time I get entrys like the last 3 entrys on the log. Is this just people trying to access my router or hitting it?? The IP’s from where I connect to this router remotely change often, but how do I prevent these TCP connections that arent mine?? Do you think they’ve gained access???
No, they didn’t gained access (yet, rsrs). It’s a PPTP try or a scan on port 1723, but read Normis’ post, where he tells about basic security:
http://forum.mikrotik.com/t/securing-your-device-is-important/115520/1
And here is link to Wiki, with a lot of examples to secure your router adding firewall rules and disabling services if you will not using: