Hacking Issue

Hi guys,

I saw some weird login issues on one of my mikrotik. Looks like someone created srcnat on the router. I deleted it, changed usernames and passwords but there is a VPN connection.

Datacenter staff was did my configuration and i dont know they did this or not. What will happen If i remove this pool and user? You can see the attachment.

Looks like someone connected my router to VPN network and doing something shitty.
Screen Shot 2018-06-27 at 01.07.03.png
Screen Shot 2018-06-27 at 01.08.02.png
Screen Shot 2018-06-27 at 01.06.58.png

http://forum.mikrotik.com/t/s-o-s-new-vurnelabilty-on-6-42-3-no/120528/1
http://forum.mikrotik.com/t/hacked-again-changed-username-and-password/120838/1
http://forum.mikrotik.com/t/unknown-admin-with-unknown-ip-address-loges-in-my-mikrotik-router-via-api/120785/1

And official one:
http://forum.mikrotik.com/t/vpnfilter-official-statement/119763/1