We’d like to remind Forumites to please avoid political debate on the Forum.
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
Internet running slow
Linton
Posts: 18,382 Forumite
in Techie Stuff
My internet connection has been running slowly for some days. Malwarebytes picked up nothing of interest. The event log on my router is showing a lot of port forwarding messages: For example....
22:17:43, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [194.54.31.221:50935] ppp0 NAPT)
22:17:01, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [201.24.97.147:1801] ppp0 NAPT)
22:13:06, 05 Dec.IN: BLOCK [16] Remote administration (TCP 198.20.69.74:9272->62.56.49.34:443 on ppp0)
22:12:28, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:27, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49758->193.0.160.238:443 on ppp0)
22:12:27, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:25, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49729->185.31.128.220:443 on ppp0)
22:07:25, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/TIME_WAIT ppp0 NAPT)
22:07:24, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/SYN_SENT ppp0 NAPT)
22:05:18, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [157.55.130.140:40033] ppp0 NAPT)
22:04:58, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [62.56.49.34:1024] local_dev NAPT) 192.1.168.65 is my pc. I have no idea what 62.56.49.34 is. It seems to be Russian.
Any relevance?
Any ideas?
Thanks
22:17:43, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [194.54.31.221:50935] ppp0 NAPT)
22:17:01, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: UDP 192.168.1.65:35936 <-->62.56.49.34:35936 [201.24.97.147:1801] ppp0 NAPT)
22:13:06, 05 Dec.IN: BLOCK [16] Remote administration (TCP 198.20.69.74:9272->62.56.49.34:443 on ppp0)
22:12:28, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:27, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49758->193.0.160.238:443 on ppp0)
22:12:27, 05 Dec.BLOCKED 3 more packets (because of First packet is Invalid)
22:12:25, 05 Dec.OUT: BLOCK [65] First packet is Invalid (TCP 192.168.1.65:49729->185.31.128.220:443 on ppp0)
22:07:25, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/TIME_WAIT ppp0 NAPT)
22:07:24, 05 Dec.IN: ACCEPT [54] Connection opened (Port Forwarding: TCP 192.168.1.65:35936 <-->62.56.49.34:35936 [188.179.122.154:61920] CLOSED/SYN_SENT ppp0 NAPT)
22:05:18, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [157.55.130.140:40033] ppp0 NAPT)
22:04:58, 05 Dec.IN: ACCEPT [57] Connection closed (Port Forwarding: UDP 192.168.1.73:52416 <-->62.56.49.34:52416 [62.56.49.34:1024] local_dev NAPT) 192.1.168.65 is my pc. I have no idea what 62.56.49.34 is. It seems to be Russian.
Any relevance?
Any ideas?
Thanks
0
Comments
-
Russian? Looks like a UK DSL line - http://whatismyipaddress.com/ip/62.56.49.34
It looks like 2 machines on your local network have been contacted from that IP. I'd look at your firewall setting to see why those connections were not blocked. Possibly UPnP active?
There looks to be some sort of hack attempt from the USA which was blocked.
The rate these things were logged at would have no effect on your speed.
Have you been running any sort of P2P software or video streaming etc. (which may use P2P).0 -
Who's you ISP? I've been having problems with BT's dns servers this week (not that they'll admit there anything wrong). I just reconfigured to use google's dns and everything is zipping along now.
About the firrwall log - those odd port numbers look like something a bit torrent application would use. I don't think that's your problem though.0 -
Hi
inetnum: 62.56.48.0 - 62.56.51.255
netname: THUS-DYNAMIC-DSL
descr: Dynamic IP assignments for ADSL users
IP Location
Denmark Tranbjerg Tdc Bb-adsl Users ASN
AS3292 TDC TDC A/S,DK (registered Jan 17, 1995) Resolve Host 188-179-122-154-dynamic.dk.customer.tdc.net
IP Location
Brazil Brasilia Brasil Telecom S/a - Filial Distrito Federal ASN
AS8167 Brasil Telecom S/A - Filial Distrito Federal,BR (registered Nov 17, 1999) Resolve Host 201-24-97-147.fnsce703.dsl.brasiltelecom.net.br
I assume the first is your ISP. As to why the others I don't know, but a firewall block would be recommended.This is a system account and does not represent a real person. To contact the Forum Team email forumteam@moneysavingexpert.com0 -
Unlikely to be your issue.
Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).
If you've not changed or installed anything, then its unlikely to be a problem at your end.“I may not agree with you, but I will defend to the death your right to make an a** of yourself.”
<><><><><><><><><<><><><><><><><><><><><><> Don't forget to like and subscribe \/ \/ \/0 -
Strider590 wrote: »Unlikely to be your issue.
Do a bandwidth test to find out your real speed and stop turning off your router/modem (if you do).
If you've not changed or installed anything, then its unlikely to be a problem at your end.
When the internet connection is working I get a speedtest result close to my line speed. When it isnt the browser hangs waiting to connect to the speedtest website or any other website.
Currently I am seeing about 5 connections a minute, rather more than on the report in my first post.
I have switched as suggested to the google name servers. This may have helped somewhat, its difficult to be sure.
I dont run P2P software or anything unusual. When the system is slow, the % network utilisation on task manager is nearly zero.0
This discussion has been closed.
Confirm your email address to Create Threads and Reply
Categories
- All Categories
- 352.5K Banking & Borrowing
- 253.7K Reduce Debt & Boost Income
- 454.4K Spending & Discounts
- 245.5K Work, Benefits & Business
- 601.4K Mortgages, Homes & Bills
- 177.6K Life & Family
- 259.4K Travel & Transport
- 1.5M Hobbies & Leisure
- 16K Discuss & Feedback
- 37.7K Read-Only Boards
