2,095 [GWG] AVR_Project Members 7,304 posts 14,089 battles Report post #1 Posted December 1, 2020 Seems the hackers are riding the update and trying to pry their way into my systems. Trying to open a port 6881 through various non-repeating IP addresses. McAfee is shutting them down. 1 Share this post Link to post Share on other sites
2,983 Compassghost SuperTest Coordinator, Beta Testers 6,673 posts 12,154 battles Report post #2 Posted December 1, 2020 Port 6881 is typically used for Peer-2-Peer file downloads, which is commonly used by game launchers to speed up file downloads. You can disable the use of it in your Wargaming center settings but it is typically faster than the traditional single source download method and updates will take significantly longer. Share this post Link to post Share on other sites
8,502 [GWG] BrushWolf [GWG] Alpha Tester 27,535 posts 14,839 battles Report post #3 Posted December 1, 2020 Could be false positives too. Share this post Link to post Share on other sites
6,750 [WORX] Navalpride33 Members 12,073 posts 19,529 battles Report post #4 Posted December 1, 2020 Na, its your anti-virus company scaring you with false positives. Share this post Link to post Share on other sites
7,040 [HINON] RipNuN2 Members 13,848 posts Report post #5 Posted December 1, 2020 10 minutes ago, Navalpride33 said: Na, its your anti-virus company scaring you with false positives. This ^ Share this post Link to post Share on other sites
2,095 [GWG] AVR_Project Members 7,304 posts 14,089 battles Report post #6 Posted December 2, 2020 3 hours ago, Navalpride33 said: Na, its your anti-virus company scaring you with false positives. These are the only instances of this -- during updates. Also looks like whenever I start up the game as well. And why a different IP every time ????? This is not Standard Business Practice. And so these are BLOCKED.. And the game loads/Updates are done anyway. This is simply wrong. 1 Share this post Link to post Share on other sites
6,750 [WORX] Navalpride33 Members 12,073 posts 19,529 battles Report post #7 Posted December 2, 2020 3 minutes ago, AVR_Project said: These are the only instances of this -- during updates. Also looks like whenever I start up the game as well. And why a different IP every time ????? This is not Standard Business Practice. And so these are BLOCKED.. And the game loads/Updates are done anyway. This is simply wrong. Blame your Virus protection company. According to the hacker community, your a low priority target... No need to be paranoid. Share this post Link to post Share on other sites
2,095 [GWG] AVR_Project Members 7,304 posts 14,089 battles Report post #8 Posted December 2, 2020 3 hours ago, Compassghost said: Port 6881 is typically used for Peer-2-Peer file downloads, which is commonly used by game launchers to speed up file downloads. You can disable the use of it in your Wargaming center settings but it is typically faster than the traditional single source download method and updates will take significantly longer. It IS disabled... Again, this makes these attempts highly suspicious. For every one person on the Internet trying to help me, there are hundreds running autonomous programs trying to hack me. That's reality. They do this behind firewalls without consequences, routing data through 4-5 countries to mask their actual location. They ARE out there. It's not paranoia. Share this post Link to post Share on other sites
215 [MUDDX] Mudd_H_F__XX Banned 429 posts 1,082 battles Report post #9 Posted December 2, 2020 1 minute ago, AVR_Project said: Again, this makes these attempts highly suspicious. I wonder why mcafee and windows defender arent doing the same thing. I have accounts on all 4 regions. Share this post Link to post Share on other sites
2,095 [GWG] AVR_Project Members 7,304 posts 14,089 battles Report post #10 Posted December 2, 2020 3 hours ago, Compassghost said: Port 6881 is typically used for Peer-2-Peer file downloads, which is commonly used by game launchers to speed up file downloads. You can disable the use of it in your Wargaming center settings but it is typically faster than the traditional single source download method and updates will take significantly longer. I don't know why I do these things.... When I was disabling all this stuff from earlier lockups last month - I also changed this too. I guess the hackers have a copy of the game too. I can't remember... was it supposed to be 6881? Share this post Link to post Share on other sites
215 [MUDDX] Mudd_H_F__XX Banned 429 posts 1,082 battles Report post #11 Posted December 2, 2020 8 minutes ago, AVR_Project said: 6881 that is what mine has always been for 5 years Share this post Link to post Share on other sites
1,458 Noshiro_ Supertester 4,164 posts 4,643 battles Report post #12 Posted December 2, 2020 47 minutes ago, Mudd_H_F__XX said: I wonder why mcafee and windows defender arent doing the same thing. I have accounts on all 4 regions. because windows defender is much better and actually not malware, unlike mcafee Share this post Link to post Share on other sites
215 [MUDDX] Mudd_H_F__XX Banned 429 posts 1,082 battles Report post #13 Posted December 2, 2020 12 minutes ago, Noshiro_ said: because windows defender is much better and actually not malware, unlike mcafee They are both active on my compu and mcafee on my smart phone connection through T mobile Share this post Link to post Share on other sites
37 [77ARC] Dadrox Beta Testers 256 posts Report post #14 Posted December 2, 2020 In the Update window click on No Uploading. This keeps your machine from advertising and supplying updates to other computers. 1 Share this post Link to post Share on other sites