mikrotik CCR 1009 issue

RouterOS General
1

Dear Experts.
I am facing a peculiar problem for past one months.

I think my CCR 1009 is under attack or DDoS. after the attack . It loses connection with Radius Server. (ping looses) and clients gets disconnected and connected randomly.

I have attached the port scan of NMAP.

after reboot it works fine.

i have blocked these ports but how does it open iteself.
scan.jpg

2

For 2000 go to
tools/ BTest Server settings and uncheck “enable”

For 8291 (winbox port) are toy sure to close?

For 80 go to

ip / services and disable all ports except 8291

For 179 (BGP port)

add to firewall
/ip firewall filter add action=drop chain=input disabled=no dst-port=179 protocol=tcp