I been keeping tabs on what has been going on with these botnet attacks and I took notice to my Mikrotik routers, I wanted to let you all know about these IP addresses that I found in my Logs in my Router OS. IP Addresses: 126.96.36.199 and 188.8.131.52,
These two IP address have been attempting to get into the router via by winbox, when I look over the log information it says what kind of user was trying to get in, adm1n1start0r, mkdude, rj1tn3tw0rks, captivate, installer, noc, VWSAdmin, service, scurtis, field. I believe these are the botnets trying to get there machines to install the malicous ware content onto the Winbox, with brute force attacks, I went ahead and blocked them, and I suggest doing the same, blocking these two IP addresses.
I would like to know if anyone else is seeing these IP addresses or similar IP addresses trying to attack your Router, I know together we can all figure this out and bring this non-senseless attacks to a halt.