Community discussions

MikroTik App
 
cajkovski
just joined
Topic Author
Posts: 2
Joined: Tue Dec 12, 2017 1:30 pm

CHR bandwidth consumption

Tue Dec 12, 2017 1:44 pm

Hi, I am issuing problem with bandwidth consumption on CHR -v6.40.50.
I installed CHR and left it online, without using it as VPN server or any activity att all.
After tree weeks I see ether1 interface generated over 1.2 TB off bandwidth.

I have only one interface on VPS server.
CHR.jpg
You do not have the required permissions to view the files attached to this post.
 
jarda
Forum Guru
Forum Guru
Posts: 7763
Joined: Mon Oct 22, 2012 4:46 pm

Re: CHR bandwidth consumption

Tue Dec 12, 2017 9:52 pm

You maybe have left it unsecured so someone succeeded to find it. Normal thing...
 
cajkovski
just joined
Topic Author
Posts: 2
Joined: Tue Dec 12, 2017 1:30 pm

Re: CHR bandwidth consumption

Wed Dec 13, 2017 9:51 am

I changed all ports and disabled all service, I only left possibility to connect on it via Winbox on port 1463. Only service/script that I installed and it was active is blacklist. According to the log, there was attempt to connect via pptp but without success.
 
jarda
Forum Guru
Forum Guru
Posts: 7763
Joined: Mon Oct 22, 2012 4:46 pm

Re: CHR bandwidth consumption

Wed Dec 13, 2017 10:44 am

Ok. If there is still another traffic, see the torch.
If you detect attacking ip address, you can drop it in the raw firewall table. It will vanish in the time when you will not be sending responses back...
 
hajde
newbie
Posts: 26
Joined: Sat Apr 26, 2008 12:55 am
Contact:

Re: CHR bandwidth consumption

Fri Dec 22, 2017 5:31 pm

Maybe, DNS attack, torch, port 53 udp.

Who is online

Users browsing this forum: No registered users and 6 guests