Pls i’m currently using RouterOS v4. And for the past 4 days, at interval of about 6 hrs I receive the following error message " system error critical login failure for user root from 216.219.239.160 via winbox"
this message appear over 20 lines and during this period my network is disconnected after which all logged in client with their password can no longer log in… making their login and password invalid. Can someone help me to tackle this problem even if its hackers trying to invade my modem. thank you!!
TheLastPope
You’re right that someone may be trying to enter your router.
If it’s the same ip each time, you may block just that ip: /ip firewall filter add chain=input src-address=216.219.239.160 action=drop
Of course any other ip can still try ‘attacking’ your router, so if you do not use winbox from outside your network, you may safely block port 8291 on your public interface or specify known safe public ip addresses that may still use winbox access from the public interface.
Another option would be to block any public input to your router making sure to specify knock parameters first, for use anytime you want to bypass this.
And of course there’s a whole wiki section detailing how to protect your router: http://wiki.mikrotik.com/wiki/Firewall