I have earlier made a post on this and, as always, I have decided to share a video on it as a form of practical demonstration. You can find the post here.
If you have a Mikrotik router that is assigned a live IP, chances are that it is being attacked right now. Attackers use bruteforce attacks to try to have unauthorized access to your router, and most of the time, these attacks are done via ssh. The purpose of this video is not only to show how you can secure your router but also to show how the router’s processor can be saved from the millions of authentication failures that arise access a result of these unauthorized access attempts.
See video below.