Block incomming data from 8080 messages

RouterOS Beginner Basics
1

Since I have blocked the port 8080 I get to see this in the log. even though the router is running alone. It seems like hacking attempts are being made. Anyone have an idea what’s going on?

07:05:52 firewall,info 8080 blok input: in:sfpplus1-telenet out:(unknown 0), src-mac 00:17:10:87:0f:42, proto TCP (SYN), 172.104.242.173:45522->xx.xx.xx.xxx:8080, len 40
07:09:46 firewall,info 8080 blok input: in:sfpplus1-telenet out:(unknown 0), src-mac 00:17:10:87:0f:42, proto TCP (SYN), 78.108.177.52:35373->xx.xx.xx.xxx:8080, len 48
07:20:25 firewall,info 8080 blok input: in:sfpplus1-telenet out:(unknown 0), src-mac 00:17:10:87:0f:42, proto TCP (SYN), 159.203.201.126:37678->xx.xx.xx.xxx:8080, len 40

The xx.xx.xx.xxx is my IP-adres

add action=drop chain=input comment=“Blok poort 8080” in-interface-list=WAN log=yes log-prefix=“8080 blok” protocol=tcp src-port=8080
add action=drop chain=input comment=“Blok poort 8080” dst-port=8080 in-interface-list=WAN log=yes log-prefix=“8080 blok” protocol=tcp

Anyone have an idea what’s going on?
Greatings

2

Port 8080 is pretty much standard web proxy. So there are users (bot net?) checking if you’ve got proxy open.

3

Thanks, for your answer.
Greatings