A question about logs.
I normally see these entries for users connecting to VPN remotely with the client (using softether vpn) but I see them internally on the LAN too in the logs. the source of the connections is from my Domain Controller.
The connect and disconnect happens within 1 or 2 seconds so Im not sure what is happening.
It happens 3-4 times a day.
Port numbers are random too.
[xxxxxxxx0101/VPN] (2020-05-16 16:01:25.218) <SERVER_LOG>: On the TCP Listener (Port 443), a Client (IP address 192.168.xxx.xxx, Host name "my_domain_controller Sever", Port number 60616) has connected.
[xxxxxxxx0101/VPN] (2020-05-16 08:01:26.973) <SERVER_LOG>: Connection "CID-xxxxxxxxxxx" has been terminated.
[xxxxxxxx01/VPN] (2020-05-16 08:01:26.973) <SERVER_LOG>: The connection with the client (IP address 192.168.xxx.xxx, Port number 55832) has been disconnected.
Query on Connections and Disconnections to softether from inside my network.
-
- Posts: 19
- Joined: Thu Apr 09, 2020 3:53 pm