Trying to figure why this is happening as of 6.44, also tried 6.44.1. I upgraded all my wAP AC units (5), however only one of them is displaying this behavior.



DDNS is disabled, Update Time is disabled, TZ auto detect is disabled. No scripts, scheduler, etc. What else would cause RouterOS to reach out to the internet like this?

Does it have the Detect Internet set?

Nope. Very basic config, bridged wlans, some virtual APs, no CAPSMAN. Can't think what else would be causing it.

the ip is download.mikrotik.com, i just type it in my mobile. probably checking updates

Why would it be doing this by itself? I have no auto upgrade configured, no one is logged in and running check-for-updates. None of the other devices with the same config are doing this.

Well i think its coming from your client not from your router since its on Forward chain

The log screenshot is from my core router, the AP has forwarding disabled since it bridges onto the appropriate VLANs so it can't be coming from a client.

My guess is that the router check if there are any new versions available.
I have noted that if I use the Mikrotik app on Android I see on the "login page" if there is a update available on some units before I check manually.
But this is a guess of mine.

Just guessing here but I'd look into /ip cloud and see if DDNS is enabled?

First thing I checked, definitely disabled.

Port 80, so if it's http, then let it connect, catch few packets and look what's inside, it could give you some hint what it is.

Same issue. Found tip with
/system logging add action=memory disabled=no prefix="" topics=""

and reason was unresponsive SNTP server. The reason why unresponsive SNTP server generates output 159.148.172.226:80 traffic itś still strange.

Running config should not connect to anywhere:
/system clock set time-zone-autodetect=no time-zone-name=Europe/Helsinki
/system clock manual set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start="jan/01/1970 00:00:00" time-zone=+00:00

/ip cloud set ddns-enabled=no ddns-update-interval=none update-time=no
/ip cloud advanced set use-local-address=no