https://unimus.net/blog/validating-security-of-mikrotik-routers-network-wide.html
----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP ----- Original Message ----- From: "CBB - Jay Fuller" <par...@cyberbroadband.net> To: af@af.afmug.com Sent: Sunday, August 5, 2018 1:10:51 PM Subject: [AFMUG] mikrotik hacked.....again Looking through all of our routers, most running the latest firmware, most running non-standard winbox ports, i still see the following today: * accept rule in firewall (for port 10438 i think, same port enabled on ip -> socks) * account added called "service" * socks config changed ; enabled * log entries changed to only show one line anyone else seeing this? What are they doing? -- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
-- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
