View Single Post
Old 24-07-2019, 08:43   #4
roughbeast
cf.mega poster
 
roughbeast's Avatar
 
Join Date: Jul 2008
Location: Coventry
Services: Vodafone/City Fibre Gigafast 900
Posts: 1,781
roughbeast has reached the bronze age
roughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze ageroughbeast has reached the bronze age
Re: 216.218.206.86 in VPN log

Quote:
Originally Posted by Hom3r View Post
What IP is the VPN using?
My VPN is using my WAN IP but I also have DDNS configured.

---------- Post added at 08:43 ---------- Previous post was at 08:32 ----------

Quote:
Originally Posted by pip08456 View Post
A Whois lookup of the first IP reveals this.

https://www.abuseipdb.com/check/216.218.206.86
Thanks for the info.

So we are talking about an illegal hack attempt? I assume malevolence, but is it dangerous? If so, what can the attack achieve for the hackers? Given that this is a common and potentially widespread issue the attack is probably automated.

My security keys are strong, but I guess I ought to change them more often.

It's popped up again this morning, but this time with a variation in source IP.

Jul 24 01:41:02 05[IKE] 216.218.206.98 is initiating a Main Mode IKE_SA
__________________
Join Date: Jul 2008
Location: Coventry
Services: FACTCO/CityFibre 1GB FTTP; Asus GT-AX11000 +3 iMesh nodes; Humax 2Tb TV boxes x2; Synology DS920+ used as Plex server

Last edited by roughbeast; 24-07-2019 at 08:51.
roughbeast is offline   Reply With Quote