LeakySensey: Repeated PPTP/L2TP authentication attempts indicating brute-force activity

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•4

Detects repeated authentication attempts over PPTP (port 1723) or L2TP (port 1701) protocols originating from an external network, indicative of potential brute-force activity against remote access services.