Some of my mik RBxxx routers, sometimes have a ton of "system info account user xxxx logged in from [dude ip address] via winbox" log entries....
I'm facing a similar problem with a MikroTik v3.16 router. I'm using WinBox Loader v2.2.10 in order to login to router's IP 10.3.36.1 from my PC which sits on IP 10.2.23.1. BGP is the routing protocol inside our network. By having a look into remote router's Log, it appears that my user account is logged in from another IP (10.2.15.1). Could you please have a look at it?
I hold no installation of Dude inside my network (10.2.23.0/24) and at the moment of the successful logins it could only be me logging in. No one else has access (knows the passwords to that particular router), so it couldn't be someone else logging in at the very same time.
nov/20 23:22:36 system,info,account user admin logged out from 192.168.1.10 via
winbox
nov/20 23:38:08 system,info,account user admin logged in from 192.168.1.10 via w
inbox
nov/20 23:39:20 system,info,account user admin logged out from 192.168.1.10 via
winbox
01:06:21 system,info,account user admin logged in from 10.2.15.1 via winbox
01:07:52 system,info user admin changed by admin
01:07:58 system,info,account user admin logged out from 10.2.15.1 via winbox
01:08:14 system,info,account user admin logged in from 10.2.15.1 via winbox
01:09:41 system,info user Vigor added by admin
01:09:44 system,info,account user admin logged out from 10.2.15.1 via winbox
01:10:00 system,info,account user Vigor logged in from 10.2.15.1 via winbox
01:59:25 system,info,account user Vigor logged in from 10.2.15.1 via telnet
You do not have the required permissions to view the files attached to this post.