Problems with random network traffic

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
rosaage
Posts: 1
Joined: Sun Aug 15, 2021 2:37 pm

Problems with random network traffic

Post by rosaage » Sun Aug 15, 2021 2:54 pm

Hi,
I had some problems today on my teamspeak server with lag spikes. Looking at the resource manager It seems like vpn_server had a lot of traffic. Trying to look around a bit I didn't find any logged in users, but noticed something wierd in the logs.

This is a part of the log from today: https://pastebin.com/e3T2QwL8
Is this just some random traffic hoping to take down random servers or could there be some configuration errors?
I felt it was a bit wierd that the port on all those ips was 27015. could it be related to other services running on the pc (Port 27015 is currently bound to my ark server) or is it just random because 27015 is ported outwards?

Looking back on my logs, 08 may 2021 and earlier were 1-10kB in size, but then suddenly after that they are 20-200 MB

any tips on how to stop this from happening?

zerophx
Posts: 1
Joined: Mon Aug 16, 2021 3:30 pm

Re: Problems with random network traffic

Post by zerophx » Mon Aug 16, 2021 3:32 pm

I witnessed this myself on a server and I could not link this traffic to ANY authenticated user. The traffic log is almost identical to this pastebin and it appeared what was coming inbound was being relayed back outbound at a higher rate...... DDoS? someone found an exploit? This happened on Sunday around 5pm EST, which is the same day as this user.

PJGoose
Posts: 2
Joined: Tue Aug 17, 2021 5:10 am

Re: Problems with random network traffic

Post by PJGoose » Tue Aug 17, 2021 5:12 am

Registered on the forum to ask about the very same thing, in my case process hacker was showing 1gb/s and it was causing issues for devices connected to the network. I don’t even have an internet connection that goes that fast. I’ve disabled the service for the time being until the issue is resolved.
You do not have the required permissions to view the files attached to this post.

jlemaes
Posts: 1
Joined: Tue Aug 17, 2021 5:45 am

Re: Problems with random network traffic

Post by jlemaes » Tue Aug 17, 2021 5:51 am

Same problem on our softether VPN installations. There is a new version available that mentions this problem in the changelog, released 2021-08-16: https://www.softether.org/5-download/history. For now i've blocked some IP addresses, but I will install the new version today to see if it helps.
There's also a detailed news item on the japanese site: https://ja.softether.org/9-about/news/901-210816.

PJGoose
Posts: 2
Joined: Tue Aug 17, 2021 5:10 am

Re: Problems with random network traffic

Post by PJGoose » Tue Aug 17, 2021 6:14 am

Just tried the latest version and it’s still showing the same behaviour.

Post Reply