Unusual In:ACCEPT connections, what should I do?

[#1]

Hello, 
My last post was marked as Spam for some weird reason.
I usually check the logs on my plusnet router every morn for a few minutes to see whats up (I am a curious person) usually I see a lot of IN: BLOCK messages which after reading online it tells me is the firewall doing its job and not much to worry about.
However today I check and I see this:

06:18:39, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [14.207.146.65]:18436 ppp3 NAPT)
06:18:32, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [61.99.208.51]:7896 ppp3 NAPT)
06:18:23, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [185.31.61.125]:6889 ppp3 NAPT)
06:18:20, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [172.98.86.42]:28798 ppp3 NAPT)
06:18:19, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [157.34.27.21]:59204 ppp3 NAPT)
06:18:18, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [181.30.28.51]:4000 ppp3 NAPT)
06:18:18, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [183.107.232.30]:7824 ppp3 NAPT)
06:18:17, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [84.107.79.106]:1024 ppp3 NAPT)
06:18:17, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [93.86.68.237]:1033 ppp3 NAPT)
06:18:14, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [82.5.138.176]:56309 ppp3 NAPT)
06:18:12, 25 Oct.	IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [197.229.3.234]:59551 ppp3 NAPT)
06:18:09, 25 Oct.	IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [83.81.214.109]:51142 ppp3 NAPT)

Not a single IN: BLOCK and a lot of IN: ACCEPT. Is this something I should worry about and if so is there anything I can do about it?

[#2]

Do you have a qbittorrent client ruuning ? Port 8999 is typically used by qbittorrent and it may have used uPnP to create the port forward

[#3]

Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this?

[#4]

I have no idea Im afraid. I dont use it, I just happen to know what port it uses. Try searching...

[#5]

Done a lot of searching and sadly so far found no answers.
I blocked 8999 on my own firewall but I still see connections coming in.
I do not see a way to block 8999 directly on the router.
If anyone has any more help to provide it would be appreciated.

[#6]

---

@Karalhos wrote:

Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this?

---

Close the bittorrent client? 😉

If you have it running, then things are behaving as they should. The client will be requesting that the router poke a hole through the firewall for incoming peering requests.

[#7]

After it was mentioned the bit torrent was probably the cause I completely uninstalled Qbittorrent from my pc.

However I just did it cold turkey without any editing, should I reinstall the app and ensure the settings are correctly turned off?

I check today and I am still geting the constant connections....

[#8]

Hi @Karalhos 

Did you get to resolve your issue, if not take a look at this utility.

https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview

Dan