Winbox/Dude Attack

Hello,

First of all, my English is inadequate. Sorry.

I saw a record on 29.04.2018;
logs.jpg
This is a privileged experiment of access.

Web and Winbox connections are IP limited. But there is a record like this.

I think we have a new BUG. Is there any work on this?

What kind of work do you expect? If this is unknown IP, block it completely.
There are many port scans and attacks on the internet. A good firewall is always recommended.

Hi Normis,
mikrotik.jpg
There is IP limiter on Mikrotik. Is not that enough?

We use Mikrotik as Router and Firewall. Is not it a bad option for another device to protect Mikrotik?

Yes, “available from” is a good option to use. You can also implement many other additional things:
https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router

The log messages you can see are there exactly because you have limited access to the services for a list of subnets. So whatever comes from another address to ports where these services listen is not allowed to connect but the attempt is logged, so that you would learn it happened.