RB 750 System error in logs - hacking? Should I be worried?

RouterOS Beginner Basics
1

Hi there,

I see in the log a lot of errors for login. Is this something to be worried about? And if so should I be amending the firewall settings?

Thanks!

 	#	Time	Buffer	Topics	Message

10 Jan/07/1970 10:36:05 memory system, error, critical login failure for user support from 77.247.181.165 via ssh
11 Jan/07/1970 10:47:22 memory system, error, critical login failure for user admin from 208.12.64.15 via ssh
12 Jan/07/1970 17:03:35 memory system, error, critical login failure for user leonob from 60.199.196.144 via ssh
13 Jan/07/1970 17:03:39 memory system, error, critical login failure for user ftpuser from 60.199.196.144 via ssh
14 Jan/07/1970 17:03:43 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
15 Jan/07/1970 17:03:47 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
16 Jan/07/1970 17:03:51 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
17 Jan/07/1970 17:03:56 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
18 Jan/07/1970 17:03:59 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
19 Jan/07/1970 17:04:04 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
20 Jan/07/1970 17:04:08 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
21 Jan/07/1970 17:04:12 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
22 Jan/07/1970 17:04:16 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
23 Jan/07/1970 17:04:20 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
24 Jan/07/1970 17:04:24 memory system, error, critical login failure for user oracle from 60.199.196.144 via ssh
25 Jan/07/1970 17:04:28 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
26 Jan/07/1970 17:04:32 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
27 Jan/07/1970 17:04:36 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
28 Jan/07/1970 17:04:41 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
29 Jan/07/1970 17:04:45 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
30 Jan/07/1970 17:04:49 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
31 Jan/07/1970 17:04:53 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
32 Jan/07/1970 17:04:57 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
33 Jan/07/1970 17:05:01 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
34 Jan/07/1970 17:05:05 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
35 Jan/07/1970 17:05:10 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
36 Jan/07/1970 17:05:14 memory system, error, critical login failure for user oracle from 60.199.196.144 via ssh
37 Jan/07/1970 17:05:19 memory system, error, critical login failure for user oracle from 60.199.196.144 via ssh
38 Jan/07/1970 17:05:23 memory system, error, critical login failure for user oracle from 60.199.196.144 via ssh
39 Jan/07/1970 17:05:28 memory system, error, critical login failure for user bwadmin from 60.199.196.144 via ssh
40 Jan/07/1970 17:05:32 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
41 Jan/07/1970 17:05:36 memory system, error, critical login failure for user cacti from 60.199.196.144 via ssh
42 Jan/07/1970 17:05:40 memory system, error, critical login failure for user test1 from 60.199.196.144 via ssh
43 Jan/07/1970 17:05:43 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
44 Jan/07/1970 17:05:47 memory system, error, critical login failure for user git from 60.199.196.144 via ssh
45 Jan/07/1970 17:05:52 memory system, error, critical login failure for user git from 60.199.196.144 via ssh
46 Jan/07/1970 17:05:56 memory system, error, critical login failure for user mysql from 60.199.196.144 via ssh
47 Jan/07/1970 17:06:00 memory system, error, critical login failure for user mysql from 60.199.196.144 via ssh
48 Jan/07/1970 17:06:03 memory system, error, critical login failure for user root from 60.199.196.144 via ssh
49 Jan/07/1970 17:26:55 memory ssh, info client timeout
50 Jan/07/1970 17:47:16 memory system, error, critical login failure for user admin from 91.236.116.157 via ssh
51 Jan/07/1970 17:47:18 memory system, error, critical login failure for user admin from 91.236.116.157 via ssh
52 Jan/07/1970 17:47:20 memory system, error, critical login failure for user admin from 91.236.116.157 via ssh
53 Jan/07/1970 17:47:22 memory system, error, critical login failure for user admin from 91.236.116.157 via ssh
54 Jan/07/1970 17:47:23 memory system, error, critical login failure for user admin from 91.236.116.157 via ssh
55 Jan/07/1970 17:47:25 memory system, error, critical login failure for user root from 91.236.116.157 via ssh
56 Jan/07/1970 17:47:28 memory system, error, critical login failure for user root from 91.236.116.157 via ssh
57 Jan/07/1970 17:47:29 memory system, error, critical login failure for user root from 91.236.116.157 via ssh
58 Jan/07/1970 17:47:32 memory system, error, critical login failure for user root from 91.236.116.157 via ssh
59 Jan/07/1970 17:47:33 memory system, error, critical login failure for user ubnt from 91.236.116.157 via ssh
60 Jan/07/1970 17:47:35 memory system, error, critical login failure for user ubnt from 91.236.116.157 via ssh
61 Jan/07/1970 17:47:37 memory system, error, critical login failure for user ubnt from 91.236.116.157 via ssh

75 Jan/08/1970 02:00:38 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
76 Jan/08/1970 02:00:41 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
77 Jan/08/1970 02:00:43 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
78 Jan/08/1970 02:00:45 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
79 Jan/08/1970 02:00:47 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
80 Jan/08/1970 02:00:49 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
81 Jan/08/1970 02:00:51 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
82 Jan/08/1970 02:00:53 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
83 Jan/08/1970 02:00:55 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
84 Jan/08/1970 02:00:57 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
85 Jan/08/1970 02:00:59 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
86 Jan/08/1970 02:01:01 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
87 Jan/08/1970 02:01:03 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
88 Jan/08/1970 02:01:05 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
89 Jan/08/1970 02:01:07 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
90 Jan/08/1970 02:01:09 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
91 Jan/08/1970 02:01:11 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
92 Jan/08/1970 02:01:12 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
93 Jan/08/1970 02:01:14 memory system, error, critical login failure for user root from 78.135.93.249 via ssh
94 Jan/08/1970 02:01:16 memory system, error, critical login failure for user root from 78.135.93.249 via ssh

2

disable access from unknown networks and change SSH port.

for more info, we have an article how to block this:
http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention

3

brilliant - thanks for the help.

4

Sorry - one other thing that I think has to do with the firewall. I am getting timeouts to certain IPs and certain sites won’t resolve. For example look at the traceroute below (which times out at 0.0.0.0). Any idea what’s going on here?

 	#	Host	Time 1	Time 2	Time 3	Status

0 196.210.148.129 11 10 10
1 196.38.72.113 13 11 8
2 196.35.115.128 11 10 527
3 168.209.2.13 70 12 10
4 168.209.2.3 13 10 10
5 168.209.201.10 162 171 163
6 195.50.124.33 161 160 196
7 4.69.166.149 246 236 234 MPLS:L=1846,E=0
8 4.69.153.137 231 244 230 MPLS:L=1846,E=0
9 4.69.137.78 235 235 timeout MPLS:L=1752,E=0
10 4.69.201.42 235 235 235 MPLS:L=1412,E=0
11 4.69.201.93 237 234 235 MPLS:L=1913,E=0
12 4.69.134.154 233 237 232 MPLS:L=1025,E=0
13 4.69.149.78 246 230 235
14 4.79.22.86 233 230 351
15 72.21.220.151 232 235 235 MPLS:L=304496,E=0
16 72.21.222.157 236 235 234
17 0.0.0.0 timeout timeout timeout
18 0.0.0.0 timeout timeout timeout
19 0.0.0.0 timeout timeout timeout
20 216.182.224.85 237 234 235
21 0.0.0.0 timeout timeout timeout
22 0.0.0.0 timeout timeout timeout
23 0.0.0.0 timeout timeout timeout
24 0.0.0.0 timeout timeout timeout
25 0.0.0.0 timeout timeout timeout
26 0.0.0.0 timeout timeout timeout
27 0.0.0.0 timeout timeout timeout
28 0.0.0.0 timeout timeout timeout
29 0.0.0.0 timeout timeout timeout
30 0.0.0.0 timeout timeout timeout
31 0.0.0.0 timeout timeout timeout