LeakySensey: Large-scale scan of PPTP/L2TP VPN ports - possible AI-driven vulnerability discovery pipeline
Detects high-frequency connection attempts to PPTP (1723) and L2TP (1701) VPN ports from an external source, indicative of automated scanning or vulnerability discovery activity.
Suricata

