Login failures via telnet and ssh

RouterOS General
1

Hello,

I have just bought a Mikrotik router and installed it today. While browsing the settings however I have noticed something that worried me in the logs. Only hour after i set it up there were multiple login attempts.
First there were one looking like that: login failure for user admin from 115.239.248.35 via ssh
And then many from telnet. Screenshot: https://drive.google.com/open?id=0B_ivclvTo-BHaW0tZzZmb0NsTkU

I have set it up via the quick settings and added passwords for the router and for the admin before that happen.
Should I be worried and is there something I need to do?

Thank you!

2

You should implement more strict firewall rules that will not allow such tryouts from the outer world. You can disable those services too. Hope you have removed default admin user and created new with not common name and password. You can also put those often attempting ips on the black list automatically and drop them generally. You need to decide what is best for you…

3

Thanks, I’ve done most of the things you suggested and I hope everything is fine now.