Firewall Blocking Certain Source IP's every 3 to 4 seconds

Using CIS 3.5.57173.439, I find my Firewall events blocking 4 or 5 specific Source Ip’s, each having it’s own specific Source Port every couple of seconds. Source destination and source port for every block are my settings for utorrent, which are the settings in this first thread (

Is this amount of blocking normal, even with the utorrent app not running?

After clpsing a p2p program you will see quite some traffic up until hours after closing it. It takes time for the clients on the network to see you are not present anymore.

You can filter those requests as they are not harmful. Use the tips 11.12 and 13 from Bad Frogger in this topic:;msg230413#msg230413 .