You just saved my router from an Intrusion Attack. From an advice in the Community I inserted a Firewall Rule that only allowed LAN (Local IP Address) to access my Router over the Winbox Port 8291. This I did from day one.
But then I noticed that Packets get rejected so I turned on Log and got a hart attack that external IPs tried to access that Port. From an advice in the Mikrotik Wiki on how Services work (Very nice Documentation btw) - I changed the Ports with a few clicks and presto no more attacks on the Mikrotik Router.
Do not forget that your router is still under attack but packets are dropped or not accepted.
Your line is still full of unwanted traffic scanning for open ports or services.
