Hi,

Just saw this on terminal, that I think is trying to hack on my mikrotik, how can I possibly block this IP?

jul/21/2013 16:32:03 system,error,critical login failure for user ts from 118.175.
15.205 via ssh
jul/21/2013 16:32:03 system,error,critical login failure for user teamspeak from 1
18.175.15.205 via ssh
jul/21/2013 16:32:04 system,error,critical login failure for user teamspeak from 1
18.175.15.205 via ssh
jul/21/2013 16:32:04 system,error,critical login failure for user eggdrop from 118
.175.15.205 via ssh
jul/21/2013 16:32:05 system,error,critical login failure for user hlds from 118.17
5.15.205 via ssh
jul/21/2013 16:32:05 system,error,critical login failure for user cstrike from 118
.175.15.205 via ssh
jul/21/2013 16:32:06 system,error,critical login failure for user user1 from 118.1
75.15.205 via ssh
jul/21/2013 16:32:06 system,error,critical login failure for user user2 from 118.1
75.15.205 via ssh

Me too have the same problem can anyone please help us....

or go to Ip->Services and in the SSH Service change the Available From ip range

Code: Select all

/ip firewall filter
add action=drop chain=input src-address=118.175.15.205

or go to Ip->Services and in the SSH Service change the Available From ip range

Thank you!

or simply disable this service if do not use.