Обьясните что твориться в логах Mikrotik

[dimka890 16]

в последнее время начал в логих наблюдать следующее:

10:41:18 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:20 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:22 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:24 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:26 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:28 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:30 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:32 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:34 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:36 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:38 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:40 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:42 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:44 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:46 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:48 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:50 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:52 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:54 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:56 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:41:58 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:00 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:02 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:04 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:06 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:08 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:10 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:12 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:14 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:16 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:18 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:20 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:22 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:24 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:26 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:28 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:30 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:32 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:34 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:36 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:38 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:40 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:42 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:44 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:46 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:48 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:50 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:52 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:54 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:56 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:42:58 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:00 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:02 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:04 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:06 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:08 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:10 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:12 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:14 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:16 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:18 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:20 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:22 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:24 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:26 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:28 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:30 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:32 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:34 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:36 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:38 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:40 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:42 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:44 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:46 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:48 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:50 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:52 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:54 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:56 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:43:58 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:44:00 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:44:02 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:44:04 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:44:06 system,error,critical login failure for user root from 8.25.218.88 via ssh
10:44:08 system,error,critical login failure for user root from 8.25.218.88 via ssh
18:03:01 system,error,critical login failure for user anonymous from 10.100.8.182 via ftp
18:37:01 system,error,critical login failure for user anonymous from 10.100.13.52 via ftp
18:37:02 system,error,critical login failure for user anonymous from 10.100.13.52 via ftp
19:55:48 system,error,critical login failure for user anonymous from 10.100.12.64 via ftp
20:42:29 system,error,critical login failure for user anonymous from 10.100.9.113 via ftp
20:42:30 system,error,critical login failure for user anonymous from 10.100.9.113 via ftp
21:25:06 system,info,account user admin logged in from 10.100.12.239 via winbox

внешний адресс постоянно меняется, внутренний тоже.

почему это происходит и как с этим бороться?

[Ромка 565]

кто-то пытается заломиться по ssh и по ftp.

настроить allow address для ssh/winbox/ftp

[Enferno 163]

или смените порт ссш, а фтп вообще вырубить!

[dimka890 16]

ну то что пытаються заломиться то понятно, просто непонятно кто и почему? или типа кулхацкеры?

[Ромка 565]

скорее всего боты

[dimka890 16]

закрыл доступ по FTP вообще, по SSH оставил, но перенес на другой порт, посмотрим че будет.

кстати после таких приколов иногда даже инет падал