I expose only port 30303, not 8545. But when I issue commands eth.accounts. I found these accounts were imported without my knowledge:
"0xe4fe1fb7e693c529f5a95dd8b1714d1acfdbd058", "0x0a320acfe5f78d9b689f6dd1fd848ee65a790925", "0xce3236d5e92d6c5540c51f8378297d4fad4ce6fd", "0x433ce9234c6cad07244177ddb8fa7614d4626358", "0x99c979f0302da89025de1e7d812e9d19a4ff9cd3"
Is my GETH hacked? Or these are my peers? My GETH is running extremely slow recently and failed to catchup with the sync