D
D
daiv061408402022-03-06 20:17:14
Computer networks
daiv06140840, 2022-03-06 20:17:14

Strange network activity on mikrotik, am I the only one?

On all (more than 10) mikrotik devices, with different architectures, I see strange network activity in the torso (even when all physical network interfaces except ISP are disabled):
185.156.73.125:40230
and a few more, but this connection is definitely on everyone.
How to check for yourself:
winbox - tools - torch, select interface (your ISP interface) - entry timeout 10+ minutes - uncheck src / dst v6, check port, source and dst addresses 0.0.0.0/0. Let's start, wait.

What kind of connets is microt initiating?

Answer the question

In order to leave comments, you need to log in

3 answer(s)
D
Dmitry Alexandrov, 2022-03-06
@jamakasi666

Bot scans

F
fitbikeco, 2022-03-07
@fitbikeco

in spamrats this ip is blacklisted.
https:// bgp. he. net/ip/185.156.73.125#_rbl
RBL (remote block list or realtime blackhole list)

N
Nikadim Tsatskin, 2022-03-10
@BigDrive

On March 7, this address was blacklisted for 15 days

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question