Is it hacking?

Antibiotic

as admin in a cmd prompt run netstat -anb

I did, but for this moment no connections with those IP's

johnpoz

@Antibiotic I see a 6881 port in there - you running torrents? Also that 6900 port also common torrent port.. So yeah I would expect IPs from all over.. I mean all over!!

Antibiotic

@johnpoz I'm also start think about torrent client))))

johnpoz

@Antibiotic blocking outbound while your running a torrents going to drastically reduce the overall capability for it to function at its peak.

JonathanLee

It looks like bit-torrents, Azure, Limewire, something like that. If you use snort you could activate openAppID and see what it is in a second

Gertjan

@JonathanLee said in Is it hacking?:

If you use snort

Or clean up the PC ?!

johnpoz

Maybe he is running torrents on purpose? He did say it was his laptop.. How would torrent just show up without the user knowing they were running torrents?

Antibiotic

@Gertjan said in Is it hacking?:

Or clean up the PC ?!

Funny)))

Antibiotic

@johnpoz said in Is it hacking?:

Maybe he is running torrents on purpose? He did say it was his laptop.. How would torrent just show up without the user knowing they were running torrents?

It was my torrent client on laptop.

JonathanLee

@Antibiotic get rid of that torrent client eventually it’s gonna break stuff if you keep using it. Trust me. Stop using it, think about how many ports you need open. It just takes one bad download