MikroTik

Greetings Friends
I have setup few firewall rules and preferred to log.
My log files shows as figure below am i being scanned, pinged, hacked ?

Also i never login via SSH/Telnet i use only winbox and the log is saying "logged in via telnet" any thing wrong or this is an normal behavior.
Thanks

All of those ICMP messages are "port unreachable" from various public IPs to 182.50.67.52 which then got NAT to destination 192.168.6.9

Basically, it looks like perhaps 192.168.6.9 did a traceroute to somewhere, or possibly it tried to access this set of IP addresses on some UDP service they're not listening on (which is how traceroute does its "pings" by the way).

The telnet logins were from 192.168.6.9 - which is the same machine that generated these port unreachable messages. Since winbox terminal session shows up as a telnet session, that could still be you. Do you know if that was the IP of your workstation at the time shown?

ICMP type 3/ code 3 means destination unreachable. Since you have user logged from that address, i suppose that this is ok.

ok Thank you for the information.
Yes ZeroByte that's my IP Address.
But i'm puzzled it should say connected via winbox NOT Telnet.
Might it be a bug ?

ok Thank you for the information.
Yes ZeroByte that's my IP Address.
But i'm puzzled it should say connected via winbox NOT Telnet.
Might it be a bug ?

Did you open a terminal window while using winbox? That shows up as a telnet session.


Go look in system > users > active users while you're in winbox.
Open a terminal window.

Thanks ZeroByte
Now I got it
It's the Terminal window that i opened while connecting via winbox.
Feeling Enlightened