We'd like to remind Forumites to please avoid political debate on the Forum... Read More »
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
Internet running slow
Options

Linton
Posts: 18,167 Forumite



in Techie Stuff
My internet connection has been running slowly for some days. Malwarebytes picked up nothing of interest. The event log on my router is showing a lot of port forwarding messages: For example....
22:17:43, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [194.54.31.221:50935] ppp0 NAPT)
22:17:01, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [201.24.97.147:1801] ppp0 NAPT)
22:13:06, 05 Dec.IN: BLOCK [16] Remote administration (TCP 198.20.69.74:9272->62.56.49.34:443 on ppp0)
22:12:28, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:27, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49758->193.0.160.238:443 on ppp0)
22:12:27, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:25, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49729->185.31.128.220:443 on ppp0)
22:07:25, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/TIME_WAIT ppp0 NAPT)
22:07:24, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/SYN_SENT ppp0 NAPT)
22:05:18, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [157.55.130.140:40033] ppp0 NAPT)
22:04:58, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [62.56.49.34:1024] local_dev NAPT) 192.1.168.65 is my pc. I have no idea what 62.56.49.34 is. It seems to be Russian.
Any relevance?
Any ideas?
Thanks
22:17:43, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [194.54.31.221:50935] ppp0 NAPT)
22:17:01, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [201.24.97.147:1801] ppp0 NAPT)
22:13:06, 05 Dec.IN: BLOCK [16] Remote administration (TCP 198.20.69.74:9272->62.56.49.34:443 on ppp0)
22:12:28, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:27, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49758->193.0.160.238:443 on ppp0)
22:12:27, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:25, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49729->185.31.128.220:443 on ppp0)
22:07:25, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/TIME_WAIT ppp0 NAPT)
22:07:24, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/SYN_SENT ppp0 NAPT)
22:05:18, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [157.55.130.140:40033] ppp0 NAPT)
22:04:58, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [62.56.49.34:1024] local_dev NAPT) 192.1.168.65 is my pc. I have no idea what 62.56.49.34 is. It seems to be Russian.
Any relevance?
Any ideas?
Thanks
0
Comments
-
Russian? Looks like a UK DSL line - http://whatismyipaddress.com/ip/62.56.49.34
It looks like 2 machines on your local network have been contacted from that IP. I'd look at your firewall setting to see why those connections were not blocked. Possibly UPnP active?
There looks to be some sort of hack attempt from the USA which was blocked.
The rate these things were logged at would have no effect on your speed.
Have you been running any sort of P2P software or video streaming etc. (which may use P2P).0 -
Who's you ISP? I've been having problems with BT's dns servers this week (not that they'll admit there anything wrong). I just reconfigured to use google's dns and everything is zipping along now.
About the firrwall log - those odd port numbers look like something a bit torrent application would use. I don't think that's your problem though.0 -
Hi
inetnum: 62.56.48.0 - 62.56.51.255
netname: THUS-DYNAMIC-DSL
descr: Dynamic IP assignments for ADSL users
IP LocationDenmark Tranbjerg Tdc Bb-adsl Users ASN
AS3292 TDC TDC A/S,DK (registered Jan 17, 1995) Resolve Host 188-179-122-154-dynamic.dk.customer.tdc.net
IP LocationBrazil Brasilia Brasil Telecom S/a - Filial Distrito Federal ASN
AS8167 Brasil Telecom S/A - Filial Distrito Federal,BR (registered Nov 17, 1999) Resolve Host 201-24-97-147.fnsce703.dsl.brasiltelecom.net.br
I assume the first is your ISP. As to why the others I don't know, but a firewall block would be recommended.This is a system account and does not represent a real person. To contact the Forum Team email forumteam@moneysavingexpert.com0 -
Unlikely to be your issue.
Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).
If you've not changed or installed anything, then its unlikely to be a problem at your end.“I may not agree with you, but I will defend to the death your right to make an a** of yourself.”
<><><><><><><><><<><><><><><><><><><><><><> Don't forget to like and subscribe \/ \/ \/0 -
Strider590 wrote: »Unlikely to be your issue.
Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).
If you've not changed or installed anything, then its unlikely to be a problem at your end.
When the internet connection is working I get a speedtest result close to my line speed. When it isnt the browser hangs waiting to connect to the speedtest website or any other website.
Currently I am seeing about 5 connections a minute, rather more than on the report in my first post.
I have switched as suggested to the google name servers. This may have helped somewhat, its difficult to be sure.
I dont run P2P software or anything unusual. When the system is slow, the % network utilisation on task manager is nearly zero.0
This discussion has been closed.
Confirm your email address to Create Threads and Reply

Categories
- All Categories
- 351K Banking & Borrowing
- 253.1K Reduce Debt & Boost Income
- 453.6K Spending & Discounts
- 244.1K Work, Benefits & Business
- 599K Mortgages, Homes & Bills
- 177K Life & Family
- 257.4K Travel & Transport
- 1.5M Hobbies & Leisure
- 16.1K Discuss & Feedback
- 37.6K Read-Only Boards