Ssh bruteforce attack ,and the source is my network gateway.

Hello there community ,

I am under ssh attack from one ip of my network ( the gateway ) , maybe someone scan my network range and set my ip in some device? This started after i drop all external ips of network of ssh and telnet ports.

Is the standard gateway a Mikrotik machine?

Yes .Mikrotik CCR.

Can you post the logfile please

Sorry but i duplicate this forum ,( i am newbie here) , so the correct forum is http://forum.mikrotik.com/t/ssh-bruteforce-atack-inside-my-network/77648/5

Sorry about this. :frowning: