People trying to access my router

RouterOS General
1

Hi all. Was looking through my logs and noticed a bunch of failed login attempts from random IPs. Was just wondering if this was normal. If not, what should I do? I’ve disabled the telnet, ftp, and ssh ports in IP > Services already. Anything else I should be aware of?
https://imgur.com/RF2LifA

2

Your firewall is probably incorrect, usually due to adding a PPPoE interface following incorrect advise on the internet.

3

Better would be to allow those services and set up firewall to protect the router from WAN port.

4

Thanks for replies, I’ll look into firewall security :slight_smile:

5

Implement this: http://forum.mikrotik.com/t/blacklist-filter-update-script/89817/1

6

I only allow ssh access from outside and then have Bruteforce login prevention. http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention