Weird IP Addresses trying to connect to my router?

JB700

[OP]
Regulars
Apr 11, 2018
82
28
So, I recently got a public static IP from my ISP . I was looking around on MicroTik's torch function which shows IPs that are trying to connect to my router and I noticed some strange IPs trying to connect to port 23 (telnet). Most of them are from India, two from China and one from Malaysia. I know that public IPs are much more vulnerable to attacks than private IPs.

I'm on latest RouterOS version 6.44.3 and had telnet feature on my router disabled.



Edit: Some new IPs that are also doing the same. 197.0.5.137 (Tunisia).

Edit 2: I added some bruteforce protection firewall rules to my router using this guide. Some of the above IP Addresses are showing up on filter address list from time to time. Most of the IPs that show up are on same block as my Public IP (103.69.X.X)

Edit 3: Seems like atleast some of these IPs were trying to bruteforce my router as they made into black list.
 
Last edited:

kanurag94

Member
Mar 7, 2019
23
15
Which LCO you are currently on? I am looking for decent public IP provider in our area.
Btw this is normal
 


  • Like
Reactions: JB700

varkey

Regulars
Jun 11, 2006
827
312
That's my local IP. My isp provides public static IP but on my router I've to use 10.89.139.188.
I see, so they don't directly assign the public IP address. Probably like a one to one NAT.
 


  • Like
Reactions: JB700

JB700

[OP]
Regulars
Apr 11, 2018
82
28
I set up a basic anti-bruteforce firewall to prevent a single IP from attempting to access my router too much.


 

Similar threads