Today i discovered a possible hack attempt in my VPN connection.
I use the lastest version of astaro 5 (version 5.1)
As i do not exactly get what happened i will try to share it with you and maybe someone can help me with this ?
First i got an email (from ids) that there was a dictionary attack on mij server. The strange thing was that the attack was from my internal ip-numbers used bij the PPTP range !
After looking at the log files of the pptp i discovered that someone did have a connection for at least 9.5 minutes !!
I will attach the log file maybe that someone has a explanation about this ??
a little part of the log file mentions: pppd-pptp[898]: Plugin /usr/sbin/aua.so loaded --> this worries me most
Thanx
This thread was automatically locked due to age.
