Community discussions

 
plisken
Forum Guru
Forum Guru
Topic Author
Posts: 2425
Joined: Sun May 15, 2011 12:24 am
Location: Belgium
Contact:

Does this mean that these IP addresses were connected to my network and used my network?

Sun Jul 28, 2019 10:04 am

Does this mean that these IP addresses were connected to my network and used my network?
Are these logged in because I doubt that they do not have my login.
I use RouterOS 6.44.5 long term.

jul/26 19:13:41 ovpn,info TCP connection established from 67.21.36.2 
jul/26 20:04:38 ovpn,info TCP connection established from 3.14.254.187 
jul/26 20:45:24 ovpn,info TCP connection established from 169.197.108.30 
jul/26 21:25:04 ovpn,info TCP connection established from 92.118.161.49 
jul/27 02:24:24 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:24:25 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:24:31 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:24:35 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:24:41 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:24:42 ovpn,info TCP connection established from 118.193.31.180 
jul/27 02:25:48 ovpn,info TCP connection established from 128.14.209.234 
jul/27 02:56:04 ovpn,info TCP connection established from 41.65.68.227 
jul/27 03:03:44 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:03:44 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:03:45 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:03:45 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:03:46 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:03:46 ovpn,info TCP connection established from 162.209.239.1 
jul/27 03:45:48 ovpn,info TCP connection established from 137.226.113.9 
jul/27 06:02:38 ovpn,info TCP connection established from 184.105.139.70 
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1790
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: Does this mean that these IP addresses were connected to my network and used my network?

Sun Jul 28, 2019 12:16 pm

tcp connection is the first step in establishing a vpn session. Then comes authentication of the server and user, and finally ip layer configuration.
this just means that somebody established the first step.
 
plisken
Forum Guru
Forum Guru
Topic Author
Posts: 2425
Joined: Sun May 15, 2011 12:24 am
Location: Belgium
Contact:

Re: Does this mean that these IP addresses were connected to my network and used my network?

Sun Jul 28, 2019 1:35 pm

Thank you for your reply Sebastia.
It reassures me that they have not yet entered my network.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1309
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Does this mean that these IP addresses were connected to my network and used my network?

Sun Jul 28, 2019 5:35 pm

Look at my post here:
viewtopic.php?f=9&t=148397&p=730484#p730484

I did make a script that take those IPSec testers and back lists them for 30 day.
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 

Who is online

Users browsing this forum: No registered users and 129 guests