Community discussions

MikroTik App
 
apr
just joined
Topic Author
Posts: 5
Joined: Wed Feb 03, 2016 10:20 am

system,error,critical login failure for user admin from [...] via winbox

Fri Dec 09, 2016 10:48 am

My RB3111UiAS (arm) running fine, uptime 79days.

Suddenly in the log I see the followings for each day always the same time.

My firewall only allows inbound connection for 25/443/5444 (sstp vpn), nothing more.
In MAC server all interface disabled for WinBox (tested I cannot connect from local network via mac address)

The strange logs (happens once each day with the same timestamp):

dec/08 07:23:30 system,error,critical login failure for user admin from 10.0.0.1 via winbox
dec/08 07:23:30 system,error,critical login failure for user admin from [my wan ip] via winbox
dec/08 07:23:30 system,error,critical login failure for user admin from 10.0.0.1 via winbox

How can I fix this?
 
apr
just joined
Topic Author
Posts: 5
Joined: Wed Feb 03, 2016 10:20 am

Re: system,error,critical login failure for user admin from [...] via winbox

Thu Dec 15, 2016 2:35 pm

Update os to v6.37.3, and the log changed to:

system,error,critical login failure for user admin from 10.0.0.1 via dude

So dude server(?) try to log in (from where?) as admin. But I have no admin user at all (renamed the default admin).
How can we fix this?
 
kiano
just joined
Posts: 4
Joined: Sun Mar 11, 2018 9:08 pm

Re: system,error,critical login failure for user admin from [...] via winbox

Wed Jun 20, 2018 9:36 am

still actually
login failure for user admin from 127.0.0.1 via dude
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1127
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: system,error,critical login failure for user admin from [...] via winbox

Wed Jun 20, 2018 12:14 pm

Can you post an export of your firewall? If you are getting login attempts from your WAN IP then something is still open.
What local address range are using?
Do you use Dude in your network?
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials

Who is online

Users browsing this forum: anitamh, Baidu [Spider], Chaosphere64, HristoRaykov, justarankamateur and 56 guests