hello
I have a new problem after a few change access of somebody in core router ccr 1036, I omitted a few of users in /system/users
but after some hours.one guy can connect to the router, I have checked scrips,scheduler, change user (admin ) and pass
, I don't know what should I do to find this..

I don't understand. Does some unknown person access your router? Why?

I don't understand. Does some unknown person access your router? Why?

yes, a person access on my router
I have limited the ip address in
\ip\services
and
\system\users\
but as the picture show it can connect anyway [https://pasteboard.co/J0ShjW6.jpg][/img]

Your screenshot says connections were denied. So what's the problem?

Your screenshot says connections were denied. So what's the problem?

that's true, but I think that person have user/pass , however it cann't enter to my router because of limitation (ip/services )
I don't wanna to see that message again.

I don't wanna to see that message again.

Try blocking those connections using firewall filter rules instead.

I don't wanna to see that message again.

Try blocking those connections using firewall filter rules instead.

thank you andriys - something els- is there any hide script or fetch on my router ?how can I see and remove them ?

Check do you have some additional users created on your MikroTik device,
change passwords for existing accounts.