Mikrotik login failure from haker outside

RouterOS Beginner Basics
1

(16 messages not shown)
apr/21/2020 06:40:55 system,error,critical login failure for user admina from 1.0.206.
158 via api
apr/21/2020 06:44:20 system,error,critical login failure for user admin2 from 1.55.245
.18 via api
apr/21/2020 08:09:55 system,error,critical login failure for user user from 14.233.58.
101 via api
apr/21/2020 08:11:07 system,error,critical login failure for user Administrator from 1
13.53.77.232 via api
apr/21/2020 09:08:09 system,error,critical login failure for user 888888 from 113.53.1
2.228 via api
apr/21/2020 09:27:08 system,error,critical login failure for user root from 14.161.39.
168 via api
apr/21/2020 09:36:12 system,error,critical login failure for user sniffer from 113.160
.222.180 via api
apr/21/2020 10:07:38 system,error,critical login failure for user avanthi from 27.66.2
04.216 via api
log haker.jpg

2

You should NOT have admin access from internet to your router.

VPN is the way to go.

If you can not use VPN, here are some tip to prevent problems.

  1. Use another port than default.
  2. Use port knocking. This prevents someone from seeing open ports.
  3. Use a long and good password.
  4. Use access list to prevent any random internet from accessing your router.
  5. Log everything. (See my signature for example.)
  6. If possible setup the remote router to connect using VPN to an admin site.
    7.++++
3

Also, under IP services disable the ones you do not use, e.g. the API… :slight_smile:

4

No, not me, it looks like it’s a hacked server attempt from outside

5

And that is because roter are not secured. Port to administrate the router is way open on the outside. Bad configuration.

6

Concur reset to defaults and then ask for help

7
  1. disable API in “ip services”
  2. why is your firewall gone?
  3. see what all others posted above