{"id":125403,"date":"2019-02-26T04:30:00","date_gmt":"2019-02-26T04:30:00","guid":{"rendered":"https:\/\/alliedtelesdev.wpenginepowered.com\/im-being-attacked\/"},"modified":"2026-05-13T04:10:05","modified_gmt":"2026-05-13T04:10:05","slug":"im-being-attacked","status":"publish","type":"post","link":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/","title":{"rendered":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax."},"content":{"rendered":"

In my last post<\/a> I configured the OpenVPN server on an Allied Telesis AR2050V<\/a> firewall.<\/p>\n

Enabling OpenVPN means I must also have a firewall rule to allow OpenVPN traffic through the firewall. I checked out the analytics on my firewall and lo and behold\u2014found hits against my OpenVPN firewall rule. Not just one hit but thousands. Each hit represents one attempt to open a VPN connection to my server.<\/p>\n

Wow! My firewall log indicated I was being attacked from all around the world\u2014some by people but most from bots trying to access my OpenVPN server. Personally, I wasn\u2019t too worried about unauthorized people getting in, but was confused and also a little interested to understand why so many bots were persisting in their attempts to get into my firewall.<\/p>\n

So my first step was to grab a list of attackers and create a separate firewall rule that just monitors these nuisance attempts. I called them nuisances, as they didn’t get into my private network, but just pecked away at the firewall\u2019s defenses.<\/p>\n

Having a professional firewall allows you to dig deeper and monitor using the built-in analytics to find out what\u2019s hitting your WAN interface. This made it easy to collect the source IP addresses of where these access attempts were coming from. From the firewall data collected over a four-day period, I observed 324,175 attempts to access my network!<\/p>\n

Below is a partial capture of the show firewall rule output. I have only included the counters for the denied and permitted OpenVPN hits. Each hit is one attempt to access my OpenVPN server.<\/p>\n

\n
\n\"Command<\/p>\n<\/picture><\/div>\n<\/div>\n

Over an 18-minute period I found that these hits were peaking at around 180 attempts per minute to brute force a successful OpenVPN tunnel session.<\/p>\n

\n
\n\"OpenVPN<\/p>\n<\/picture><\/div>\n<\/div>\n

The bots that are trying to hack my network seem to work on brute force and high-frequency attempts against port 1194 (the port often used by OpenVPN). The bots mainly use simple linux default user id or no user id at all.<\/p>\n

If I was just relying on a simple user id and password for protection, then I\u2019d be worried right now. But my AR2050V firewall uses an x509 certificate with more than 1024-bit encryption, so the chances of breaking in are worse than winning the USA Powerball lottery!<\/p>\n

Until someone successfully breaks in, I\u2019ll enjoy the peace of mind my AR2050V firewall gives me\u2014and the sound sleep I have every night!<\/p>\n","protected":false},"excerpt":{"rendered":"

In this post, Dave configures his Allied Telesis firewall to detect cyberattacks and block malicious attempts to steal his data.<\/p>\n","protected":false},"author":39,"featured_media":117015,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"location":[],"markets":[],"partners":[],"posttype":[7993],"products":[8017],"services":[],"solutions":[8177],"site_tags":[8142,8136,8137,8147],"technologies":[],"class_list":["post-125403","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","posttype-blogpost","products-firewallsrouters","solutions-hybridworkplace","site_tags-firewallsandrouters","site_tags-networkautomation","site_tags-networkmanagement","site_tags-securenetworkaccess"],"acf":[],"yoast_head":"\nI\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis\" \/>\n<meta property=\"og:description\" content=\"In this post, Dave configures his Allied Telesis firewall to detect cyberattacks and block malicious attempts to steal his data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/\" \/>\n<meta property=\"og:site_name\" content=\"Allied Telesis\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-26T04:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-13T04:10:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1423\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"ben.allott@alliedtelesis.co.nz\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"ben.allott@alliedtelesis.co.nz\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/\"},\"author\":{\"name\":\"ben.allott@alliedtelesis.co.nz\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#\\\/schema\\\/person\\\/7d1529a6b64962d42c478aece54938ca\"},\"headline\":\"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax.\",\"datePublished\":\"2019-02-26T04:30:00+00:00\",\"dateModified\":\"2026-05-13T04:10:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/\"},\"wordCount\":422,\"publisher\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2021\\\/06\\\/blog-header-dave_s-scaled.jpg\",\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/\",\"url\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/\",\"name\":\"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2021\\\/06\\\/blog-header-dave_s-scaled.jpg\",\"datePublished\":\"2019-02-26T04:30:00+00:00\",\"dateModified\":\"2026-05-13T04:10:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2021\\\/06\\\/blog-header-dave_s-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2021\\\/06\\\/blog-header-dave_s-scaled.jpg\",\"width\":2560,\"height\":1423,\"caption\":\"blog-header-dave_s.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/it\\\/im-being-attacked\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/\",\"name\":\"Allied Telesis\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#organization\",\"name\":\"Allied Telesis\",\"url\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/logo_text_black.svg\",\"contentUrl\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/logo_text_black.svg\",\"caption\":\"Allied Telesis\"},\"image\":{\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sandboxenv.alliedtelesis.com\\\/es\\\/#\\\/schema\\\/person\\\/7d1529a6b64962d42c478aece54938ca\",\"name\":\"ben.allott@alliedtelesis.co.nz\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g\",\"caption\":\"ben.allott@alliedtelesis.co.nz\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"es_ES","og_type":"article","og_title":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis","og_description":"In this post, Dave configures his Allied Telesis firewall to detect cyberattacks and block malicious attempts to steal his data.","og_url":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/","og_site_name":"Allied Telesis","article_published_time":"2019-02-26T04:30:00+00:00","article_modified_time":"2026-05-13T04:10:05+00:00","og_image":[{"width":2560,"height":1423,"url":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg","type":"image\/jpeg"}],"author":"ben.allott@alliedtelesis.co.nz","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"ben.allott@alliedtelesis.co.nz","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#article","isPartOf":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/"},"author":{"name":"ben.allott@alliedtelesis.co.nz","@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#\/schema\/person\/7d1529a6b64962d42c478aece54938ca"},"headline":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax.","datePublished":"2019-02-26T04:30:00+00:00","dateModified":"2026-05-13T04:10:05+00:00","mainEntityOfPage":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/"},"wordCount":422,"publisher":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#organization"},"image":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#primaryimage"},"thumbnailUrl":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg","inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/","url":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/","name":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax. - Allied Telesis","isPartOf":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#primaryimage"},"image":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#primaryimage"},"thumbnailUrl":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg","datePublished":"2019-02-26T04:30:00+00:00","dateModified":"2026-05-13T04:10:05+00:00","breadcrumb":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#primaryimage","url":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg","contentUrl":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2021\/06\/blog-header-dave_s-scaled.jpg","width":2560,"height":1423,"caption":"blog-header-dave_s.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/sandboxenv.alliedtelesis.com\/it\/im-being-attacked\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sandboxenv.alliedtelesis.com\/es\/"},{"@type":"ListItem","position":2,"name":"I\u2019m Being Attacked! Don\u2019t Panic. Grab a Coffee and Relax."}]},{"@type":"WebSite","@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#website","url":"https:\/\/sandboxenv.alliedtelesis.com\/es\/","name":"Allied Telesis","description":"","publisher":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sandboxenv.alliedtelesis.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#organization","name":"Allied Telesis","url":"https:\/\/sandboxenv.alliedtelesis.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2026\/01\/logo_text_black.svg","contentUrl":"https:\/\/sandboxenv.alliedtelesis.com\/wp-content\/uploads\/2026\/01\/logo_text_black.svg","caption":"Allied Telesis"},"image":{"@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/sandboxenv.alliedtelesis.com\/es\/#\/schema\/person\/7d1529a6b64962d42c478aece54938ca","name":"ben.allott@alliedtelesis.co.nz","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fc4ede7336e9847b57aa9386892a0608cb1b54d5ebbd1f8f539bb602be01a2f2?s=96&d=mm&r=g","caption":"ben.allott@alliedtelesis.co.nz"}}]}},"_links":{"self":[{"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/posts\/125403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/users\/39"}],"replies":[{"embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/comments?post=125403"}],"version-history":[{"count":0,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/posts\/125403\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/media\/117015"}],"wp:attachment":[{"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/media?parent=125403"}],"wp:term":[{"taxonomy":"location","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/location?post=125403"},{"taxonomy":"markets","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/markets?post=125403"},{"taxonomy":"partners","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/partners?post=125403"},{"taxonomy":"posttype","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/posttype?post=125403"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/products?post=125403"},{"taxonomy":"services","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/services?post=125403"},{"taxonomy":"solutions","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/solutions?post=125403"},{"taxonomy":"site_tags","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/site_tags?post=125403"},{"taxonomy":"technologies","embeddable":true,"href":"https:\/\/sandboxenv.alliedtelesis.com\/es\/wp-json\/wp\/v2\/technologies?post=125403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}