Added
- Auto-block now also catches port scans, not just failed logins. Turn on "Watch denied connects" in Settings and mikr will also count the pre-auth "denied … connect" warnings your devices log when something probes a closed/restricted service (e.g. Winbox locked to an address). Candidates show whether each IP was a
scanor abrute-force login attempt. Off by default (these warnings can be noisy).