📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Internet running slow

Options
Linton
Linton Posts: 18,167 Forumite
Part of the Furniture 10,000 Posts Name Dropper Hung up my suit!
My internet connection has been running slowly for some days. Malwarebytes picked up nothing of interest. The event log on my router is showing a lot of port forwarding messages: For example....

22:17:43, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-​-​>62.56.49.34:35936 [194.54.31.221:50935] ppp0 NAPT)
22:17:01, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-​-​>62.56.49.34:35936 [201.24.97.147:1801] ppp0 NAPT)
22:13:06, 05 Dec.IN: BLOCK [16] Remote administration (TCP 198.20.69.74:9272-​>62.56.49.34:443 on ppp0)
22:12:28, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:27, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49758-​>193.0.160.238:443 on ppp0)
22:12:27, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:25, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49729-​>185.31.128.220:443 on ppp0)
22:07:25, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: TCP 192.168.1.65:35936 <-​-​>62.56.49.34:35936 [188.179.122.154:61920] CLOSED/TIME_WAIT ppp0 NAPT)
22:07:24, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: TCP 192.168.1.65:35936 <-​-​>62.56.49.34:35936 [188.179.122.154:61920] CLOSED/SYN_SENT ppp0 NAPT)
22:05:18, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-​-​>62.56.49.34:52416 [157.55.130.140:40033] ppp0 NAPT)
22:04:58, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-​-​>62.56.49.34:52416 [62.56.49.34:1024] local_dev NAPT) 192.1.168.65 is my pc. I have no idea what 62.56.49.34 is. It seems to be Russian.
Any relevance?
Any ideas?
Thanks

Comments

  • kwikbreaks
    kwikbreaks Posts: 9,187 Forumite
    Russian? Looks like a UK DSL line - http://whatismyipaddress.com/ip/62.56.49.34
    It looks like 2 machines on your local network have been contacted from that IP. I'd look at your firewall setting to see why those connections were not blocked. Possibly UPnP active?

    There looks to be some sort of hack attempt from the USA which was blocked.

    The rate these things were logged at would have no effect on your speed.

    Have you been running any sort of P2P software or video streaming etc. (which may use P2P).
  • thescouselander
    thescouselander Posts: 5,547 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    edited 6 December 2014 at 8:50AM
    Who's you ISP? I've been having problems with BT's dns servers this week (not that they'll admit there anything wrong). I just reconfigured to use google's dns and everything is zipping along now.

    About the firrwall log - those odd port numbers look like something a bit torrent application would use. I don't think that's your problem though.
  • System
    System Posts: 178,349 Community Admin
    10,000 Posts Photogenic Name Dropper
    Hi

    inetnum: 62.56.48.0 - 62.56.51.255
    netname: THUS-DYNAMIC-DSL
    descr: Dynamic IP assignments for ADSL users

    IP Location dk.gif Denmark Tranbjerg Tdc Bb-adsl Users ASN dk.gif AS3292 TDC TDC A/S,DK (registered Jan 17, 1995) Resolve Host 188-179-122-154-dynamic.dk.customer.tdc.net


    IP Location br.gif Brazil Brasilia Brasil Telecom S/a - Filial Distrito Federal ASN br.gif AS8167 Brasil Telecom S/A - Filial Distrito Federal,BR (registered Nov 17, 1999) Resolve Host 201-24-97-147.fnsce703.dsl.brasiltelecom.net.br

    I assume the first is your ISP. As to why the others I don't know, but a firewall block would be recommended.
    This is a system account and does not represent a real person. To contact the Forum Team email forumteam@moneysavingexpert.com
  • Strider590
    Strider590 Posts: 11,874 Forumite
    Unlikely to be your issue.

    Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).

    If you've not changed or installed anything, then its unlikely to be a problem at your end.
    “I may not agree with you, but I will defend to the death your right to make an a** of yourself.”

    <><><><><><><><><<><><><><><><><><><><><><> Don't forget to like and subscribe \/ \/ \/
  • Linton
    Linton Posts: 18,167 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Hung up my suit!
    edited 6 December 2014 at 4:38PM
    Strider590 wrote: »
    Unlikely to be your issue.

    Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).

    If you've not changed or installed anything, then its unlikely to be a problem at your end.

    When the internet connection is working I get a speedtest result close to my line speed. When it isnt the browser hangs waiting to connect to the speedtest website or any other website.

    Currently I am seeing about 5 connections a minute, rather more than on the report in my first post.

    I have switched as suggested to the google name servers. This may have helped somewhat, its difficult to be sure.

    I dont run P2P software or anything unusual. When the system is slow, the % network utilisation on task manager is nearly zero.
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351K Banking & Borrowing
  • 253.1K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244.1K Work, Benefits & Business
  • 599K Mortgages, Homes & Bills
  • 177K Life & Family
  • 257.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.