https://unimus.net/blog/validating-security-of-mikrotik-routers-network-wide.html
 




----- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




----- Original Message -----

From: "CBB - Jay Fuller" <[email protected]> 
To: [email protected] 
Sent: Sunday, August 5, 2018 1:10:51 PM 
Subject: [AFMUG] mikrotik hacked.....again 



Looking through all of our routers, most running the latest firmware, most 
running non-standard winbox ports, i still see the following today: 


* accept rule in firewall (for port 10438 i think, same port enabled on ip -> 
socks) 
* account added called "service" 
* socks config changed ; enabled 
* log entries changed to only show one line 

anyone else seeing this? What are they doing? 


-- 
AF mailing list 
[email protected] 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list
[email protected]
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to