Community discussions

MikroTik App
 
Abdock
Member Candidate
Member Candidate
Topic Author
Posts: 261
Joined: Sun Sep 25, 2005 10:50 pm

High Traffic

Tue Nov 13, 2018 3:22 pm

Hello, I have RB 750, connected to internet, with no LAN traffic i see lots of https traffic, it hits up to 10mb in both directions. What could this be? i tried to reset the router but the issue is still there.
 
nescafe2002
Forum Veteran
Forum Veteran
Posts: 897
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: High Traffic

Tue Nov 13, 2018 3:27 pm

 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3279
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: High Traffic

Tue Nov 13, 2018 4:07 pm

What RuterOS version are you running?
Do you have Winbox open on the outside?
Are you sure you are not hacked?
 
Abdock
Member Candidate
Member Candidate
Topic Author
Posts: 261
Joined: Sun Sep 25, 2005 10:50 pm

Re: High Traffic

Tue Nov 13, 2018 8:26 pm

winbox restricted to internal IP, and router OS 6.43.2, if its hacked is netinstall only way out?
 
tippenring
Member
Member
Posts: 304
Joined: Thu Oct 02, 2014 8:54 pm
Location: St Louis MO
Contact:

Re: High Traffic

Tue Nov 13, 2018 8:45 pm

Netinstall is the only foolproof way to resolve a hacked router.

You could go through the configuration and remove what appears suspicious (proxies and such), but it is nearly impossible to say with 100% certainty that the router is no longer compromised. Perhaps there is a hidden script that runs each time the router boots. Perhaps a firewall rule is ineffective due to some hidden code.

So, it's better to wipe and reinstall.

Who is online

Users browsing this forum: aoravent, Lumpy and 92 guests