Firewall - attack from specific MAC Address

RouterOS General
1

be worried ?
In the day, many of the same document from the each specificMAC => 50:87:89:30:a0:3b
info.png

2

When dealing with the WAN - only look at the IP address. The MAC address is the MAC of your Gateway, as that is the only address that your WAN should ever receive packets from.

3

Thank you for the information

  • Old saw only ip->ip
4

It looks like you have PPPoE setup as your internet connection. So the MAC address is the PPPoE server.
You will see a lot _of drops on ports 23, 25, 80, 1433, 3306, 3389, 8080, 8000. They are probes looking for weaknesses.
You can cut down on a lot of them by using a blacklist to filter known attackers.

here is a good start:
http://forum.mikrotik.com/t/blacklist-filter-update-script/89817/1