Hack Mikrotik RouterBOARD 750G r3 what am I doing wrong?

Question

Mikrotik

Hello. I set up Mikrotik with access from outside via winbox, the Internet goes through a 4G modem. But there is a problem. At first everything works, but after a while, for example, a couple of days, access is blocked and it’s impossible to log in not from the local network, not from the outside, although Mikrotik plows properly. I do a reset, configure again, put everything working, there is access from the outside. Again a day or two passes and again access is closed. I delete the admin account and make my account with full access with a very long and complex password with symbols. The piece of iron RouterBOARD 750G r3 The version of the software costs RouterOS 6.40.4. I don’t understand where the hole is and where they are hacking. Can someone tell me, as far as I understand, this is the latest firmware version for the version of this hardware .... the
config that I upload passes without errors, here is a link to the config itselfhttps://pastebin.com/FaHy8ZMA

Answer 1

https://blog.mikrotik.com/security/winbox-vulnerab...
Amazing, right?

Answer 2

before version 6.43(Stable) there is a vulnerability in Winbox link
update to the latest version

Answer 3

See if there is a microtik.php file like microtik.php
or any other file that you didn't upload there.
If you find it, delete it.
Well, add permission to access only from 1 ip - yours

Answer 4

I'm setting up a Mikrotik with access from outside via winbox

it seems to me that you yourself answered the question
in fact - change the winbox port to another and change the password, this one has already been merged successfully

Answer 5

The winbox itself is the hole. Use ssh with certificates and change ports to custom ones.
If without winbox hands from one place then do vpn then microta and use winbox through this vpn.