Abuse Complaint

RouterOS General
1

hello
i have a Mikrotik set in the cloud with a public ip
im getting a abuse complaint
https://my.interserver.net/abuse.php?id=534801&key=7b1088857b2ec16b7fda4b0b574dd1bc

and looking at
https://www.spamhaus.org/query/ip/216.158.238.229

it seems the mikrotik has a malware of some sort
i have added lots of fireware rules to the mikrotik and non work please help
i have attached the supout.rif
please help

2

Is it your public IP 216.158.238.229 ?

3

No, somebody behind the router 216.158.238.229 has malware. RouterOS can’t have malware*

*: at least hasn’t had malware since 1997.

4

yes this is my public ip

5

how can i block these malware

6

First, you need to identify yourself what kind of virus/malwere is in your LAN, then you can try to block it.
You should start with good antivirus program and antimalware one.
If you blame router as source of malware then you can try to change it to other brand and see if it helps.

7

Yes, one of your users (or webcams) is infected. You can’t know for sure which one.

8

thanks for explaining
i have over 80 clients on this router
if you know a way to help me i would be grateful

thank you

9

im not blaming the router for the problem

im a seeking help

clients connected to this router are for webcam use only

non are windows all are dvr systems

please advice

thank you

10

as far as I know, most chinese made network webcams have Trojan virus built-in (mirai botnet)

https://arstechnica.com/information-technology/2016/10/inside-the-machine-uprising-how-cameras-dvrs-took-down-parts-of-the-internet/

11

Why don’t you take the advice offered on this page:
https://www.abuseat.org/lookup.cgi?ip=216.158.238.229