Hello ,
I have just looked at the firewall connection and I saw that my router is sending data to this IP : when I search thsi Ip I found out that it's used by mikrotik

can someone explain what is it ?
and also is there any way to not send data to Mikrotik ?

Thanks ,

it is likely to be /ip cloud service - disable all of that and you should see it go away.

this is what I thought , but I have disable it on installation

Have you automatic check for updates activated ? That would also be a valid reason.

EDIT: just checked. When I manually go checking for updates, I see in that same range address 159.148.147.204 appearing in the connections list.
So it could be something as simple as that.

I don't remember doing it

but where do I see this oprion? ** I didn't try to updae when I check the address (and it's seem that it trying to check once evey 1-2 min)

Should be with a script.

no script that run\check this

Really strange then.
If it really is such a problem: add firewall rule to drop everything going to that IP address (and log for later inspection) and see what stops working.
Maybe someone else can give better ideas to determine what's causing this but I don't see any other way.

Other option:
drop your config here (terminal: /export hide-sensitive file=anynameyouwish)
Maybe something IS causing this which you are not seeing right now.

Detect Internet enabled?
https://help.mikrotik.com/docs/display/ ... t+Internet

Detect Internet enabled?
https://help.mikrotik.com/docs/display/ ... t+Internet

Very good catch !

Internet
WAN interfaces that can reach cloud.mikrotik.com using UDP protocol port 30000 can obtain this state. Reachability is checked every minute. If a cloud is not reached for 3 minutes, the state falls back to WAN.

yrs , this is what it was
internet detect

Thank you

To make sure ROS doesn't "phone home", make sure you disable:

• everything under ip cloud
• internet interface detection
• time zone autodetect