You have to remove the scripts, firewall rules etc first otherwise it will just re-run and you'll be back at square one then lock it down obviously

Set winbox address=192.168.0.0/16,10.0.0.0/8,172.16.0.0/12 disabled=noĪdd action=drop chain=input comment='Drop SSH Brute Forcers' dst-port=22 protocol=tcp src-address-list=ssh_blacklistĪdd action=add-src-to-address-list address-list=ssh_blacklist address-list-timeout=1d chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage3Īdd action=add-src-to-address-list address-list=ssh_stage3 address-list-timeout=10m chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage2Īdd action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=10m chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage1Īdd action=add-src-to-address-list address-list=ssh_stage1 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcpĪdd action=drop chain=input comment='Drop Winbox Brute Forcers' dst-port=8291 protocol=tcp src-address-list=winbox_blacklistĪdd action=add-src-to-address-list address-list=winbox_blacklist address-list-timeout=1d chain=input connection-state=new dst-port=8291 protocol=tcp src-address-list=winbox_stage3Īdd action=add-src-to-address-list address-list=winbox_stage3 address-list-timeout=10m chain=input connection-state=new dst-port=8291 protocol=tcp src-address-list=winbox_stage2Īdd action=add-src-to-address-list address-list=winbox_stage2 address-list-timeout=10m chain=input connection-state=new dst-port=8291 protocol=tcp src-address-list=winbox_stage1Īdd action=add-src-to-address-list address-list=winbox_stage1 address-list-timeout=1m chain=input connection-state=new dst-port=8291 protocol=tcp Īnd this is my new configuration (i hope i will be safe )

Solution to get access back: I just disabled all entries in /ip/firewall/filter by set disabled=yes.

Hack router port 53 tcp