WAN interface traffic is greater than LAN interface

hi
i have a mikrotik router 3.22 version installed on a celeron pc with 2GB RAM. I serve 2.5mbit/s for 180 clients. But there is a problem that WAN interface RX is greater than LAN interface TX and it is too much different sometime. At that time internet speed goes down. In /tool torch when i see the tarffic with source-ip only then it shows some ip’s RX rate is too much high like 384kbit/s or 512kbit/s. but i din not assign ip to my client more than 256kbit/s. For this problem internet speed become slow also. How can I prevent it?

Are you possibly using proxy? Sounds like you have some type of security hole on the WAN side.

yes i am using transparent proxy. how can i prevent it?

Look at the wiki, basically you need to drop any incoming packets on the WAN interface on the port your proxy is using.

you can do like this

in bridge there is filter = use it to resolve your issue by making changes in the rule one by one to sure it works properly