Security help

RouterOS General
1

Hi,

Today I was going to the log files of my Mikrotik and found this:
jul/10 06:53:04 firewall,info input: in:ether1 out:(none), src-mac 4c:96:14:af:79:4b, proto TCP (SYN), 218.65.30.107:33505->here was my own IP:22, len 40
jul/10 07:45:08 firewall,info input: in:ether1 out:(none), src-mac 4c:96:14:af:79:4b, proto TCP (SYN), 218.7.37.194:27639->here was my own IP:22, len 48
jul/10 07:56:32 firewall,info input: in:ether1 out:(none), src-mac 4c:96:14:af:79:4b, proto TCP (SYN), 221.203.3.117:43295->here was my own IP:22, len 40
jul/10 08:11:55 firewall,info input: in:ether1 out:(none), src-mac 4c:96:14:af:79:4b, proto TCP (SYN), 117.79.146.58:57000->here was my own IP:22, len 48

Can someone explain me what this means?
I cannot see the rules under firewall when I export it.

2

It means you’re connected to internet. A wonderful place, where armies of bots work day and night, trying to break into other’s systems. :slight_smile:

You must have some logging rule in input chain. Either separate log rule, or in case of newer RouterOS, logging can be enabled also for other rules (accept, etc..).