For some weird reason, Adobe Reader, SpiderOak, Firefox, and other Internet-aware apps are trying to connect what seems to be some sort of torrent trackers. I managed to find it in Online Armor logs. I'm baffled that all point to localhost address 127.0.0.1 plus some random port.
Screenshots:
This is an example prompt from OA
Could it be some backdoor going through?