Why is there a winbox user listed?

Hi,

I have an RB2011 when logging in from time to time I see a failed winbox attempt from the router ip address. anyone know what causes that. also sometimes the login isnt failed. if i look under /users/active i will see a winbox user logged in however, there is no winbox sessions connected to the router or the local subnet from that matter. Nothing on the local subnet has the ability to use winbox either. So I am curious where this user is coming from. The ip address is always the router ip address.

I think it might be from the dude server thats installed on the router but thats just a guess.

If you have a Dude server installed on MT that can be it. Do you have the same MT managed in this dude server? And if so, did you enter username and password for the device?

Yes.

The thats it. Dude will periodically connect to Mikrotik router and thats what you see in logs.

does it disconnect or stay connected. sometimes i see a connected winbox user for many hours at a time song longer then 12 hours.

It should disconnect fast.