Lots of connection attempts from IPs on abuse list

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
lawsangel
Posts: 15
Joined: Fri Feb 19, 2021 6:04 pm

Lots of connection attempts from IPs on abuse list

Post by lawsangel » Thu Feb 25, 2021 8:02 pm

I seem to get quite a lot of connection attempts every single day for IP's which mostly seem to be on some sort of reported spam / abuse list.

For example:
2021-02-25 15:27:50.186 On the TCP Listener (Port 5555), a Client (IP address 5.188.206.18, Host name "5.188.206.18", Port number 65438) has connected.
2021-02-25 15:27:50.186 For the client (IP address: 5.188.206.18, host name: "5.188.206.18", port number: 65438), connection "CID-32" has been created.
2021-02-25 15:27:50.186 Connection "CID-32" has been terminated.
2021-02-25 15:27:50.186 The connection with the client (IP address 5.188.206.18, Port number 65438) has been disconnected.

Is this normal?

nobody12
Posts: 139
Joined: Sat Feb 13, 2021 10:22 pm

Re: Lots of connection attempts from IPs on abuse list

Post by nobody12 » Sat Feb 27, 2021 10:10 am

I think this i pretty normal,
The IPs on those lists are most likely on the list because their are part of some kind of botnet which tries to find and penetrate loopholes in routers or webservers.
If you run a system connected to the internet and have services available on known ports like 80,443,25,8080 etc. you have to live with that.
I run a small smtp hub. Somtimes I had about 5.000+ attempts to break in in a day.

lawsangel
Posts: 15
Joined: Fri Feb 19, 2021 6:04 pm

Re: Lots of connection attempts from IPs on abuse list

Post by lawsangel » Mon Mar 01, 2021 1:01 am

Ok, that makes sense.
Just wasnt sure if these were direct attacks on SoftEther, or just random attempts to connect to the port.
Thanks

Post Reply