As you can see from the images below , Mikrotik keep sending data to WAN (ether2) by itself, don’t know where the traffic came from

another picture

left is WAN traffic and right is LAN traffic, you can see that after 18:00 there was sent out traffic to WAN but none traffic much from/to LAN (actually during that time my family was went out for dinner and no body home)
admin account already set with 8 chars long password with complexity / ip services open only api/api-ssl/winbox/www
The Mikrotik I’m using is “RB2011UAS-2HnD”
Does my Mikrotik got hacked? / Thank you advance for the answer.