How can I see the password (or hash for further study) under which they are trying to log in to my Mikrotik?

Question

Mikrotik

login failure for user admin from bla-bla-bla via winbox

In the settings of topics (system - logging) I did not find anything that could be added for debugging).

Answer 1

Most likely there is no way through the logs, but you can use the built-in sniffer, tools->packet sniffer, set port 8291, if necessary, set up streaming and / or other parameters (for example, the ip / mac of the attacker) and go ahead.

Answer 2

And you won't find it. All this is specially closed from mom's hackers. There is no debug there.

Answer 3

Most likely, they try standard combinations like admin:admin. It
usually makes no sense to try different passwords (for a long time and the result is not guaranteed), if this is not a targeted attack specifically on you. It is much easier to scan all network addresses for routers on them and sort through standard combinations on each found, of which there are a small limited number. Well, maybe also the most common passwords like password and 123456.