Mikrotik third-party addresses appear in the DNS section. What can be wrong?

Question

Mikrotik

Hello. A few days ago, some sites stopped opening (mostly yandex.ru). Access was lost for 5-10 minutes, then resumed. On the router, in the IP - DNS dynamic server section, addresses from the provider, in the Servers section, addresses appeared that he himself did not register there (192.200.104.42). Yesterday I changed them to addresses from Google, today the same records have been restored themselves. What is the reason for this behaviour?

Answer 1

and the provider does not distribute dhcp?
well, and a firewall - close access to the router from everywhere, except for trusted hosts

Answer 2

Exactly the same problem happened to my clients on several Mikrotiks. Moreover, microtics are all different, both in models and in firmware.
Passwords are complex everywhere (8-10 characters). ssh, telnet are disabled.

Answer 3

I had an incident with one router, I managed to see from the logs that they entered from the web bypassing the password. Exposed that the web is available only from certain ip and the problems are gone. Hike another hole. Mikrotik is getting popular.

Answer 4

I will join, I myself encountered such a problem at the end of May. DNS server addresses spontaneously changed to 192.200.104.42 and 192.200.104.43. As a result, when connecting via Wi-Fi, there are some strange redirects, pop-up windows ... There is no way to limit IP, I will hope for a firmware update.