Very odd issue with my pc an internet

[AledJ]

Today I boot my pc everything seems normal..........................then I load up msn and look at an emails I have. I click on one email and it takes ages to load, and I realise that msn had lost connection and was re-connecting. Thought it was just a one off thing but it did it again, and so I then tried loading the IGN website. Now it loaded ok but the circle thing in FF was still going round, so i clicked on some article and it took ages to load. Tried bbc and all is ok with videos ect.

I have a look at the router log and is see this;

12/14/2011 11:42:41 **TCP FIN Scan** (my ip), 50025->> 69.10.25.25, 80 (from WAN Outbound)
12/14/2011 11:42:40 **TCP FIN Scan** (my ip), 50063->> 69.10.24.213, 80 (from WAN Outbound)
12/14/2011 11:42:40 **TCP FIN Scan** (my ip), 50043->> 69.10.25.14, 80 (from WAN Outbound)


Turned pc off and tried again same thing! Do the update for any windows things, still same issue. Now I have not dl anything dodgy, no strange website. In fact the last few days I have just been on BBC website, hotmail, facebook, and IGN. Doing a virus scan now but nothing has turned up yet. If my virus scan shows nothing then i'm lost for what the issue is.

Any help would be great!

[blueball]

Have you tried rebooting the router/modem?

[AledJ]

Should I just unplug them both then?

[AledJ]

Ok that seems to have sorted it for now. But in my router settings page the time is 0:25:14 PM


edit: Still getting the wan outbound thing form my ip. And kaspersky has found nothing very confused!!!

[blueball]

The IPs are in the States. Have you got anything running that might be maintaining a connection? Skype, MSN, Steam, Origin, etc?

[mycarsavw]

69.10.25.25 - Geo Information
IP Address 	69.10.25.25
Host 	69.10.25.25
Location 	US US, United States
City 	San Francisco, CA 94107
Organization 	IGN Entertainment
ISP 	IGN Entertainment
AS Number 	AS27437 IGN Entertainment
Latitude 	37°76'97" North
Longitude 	122°39'33" West
Distance 	10420.56 km (6475.04 miles)

[AledJ]

I have steam, origin, msn will check if those entries appear when I use them. Thing is they never have before. And when refreshing hexus the loading button just goes on and on. How am I able to look up the ip address? Also why is it a tcp fin scan?

[blueball]

don't know why it is a fin scan but it could be that your firewall is overreacting and generating a false positive.

[mycarsavw]

Hexus forums are on 195.78.94.239 you could try entering that instead of a URL to rule out whether the issue is your ISP/DNS or something else.

Open a command prompt and type "netstat -a" without the quotes to see who is connected to you.

[AledJ]

Hexus forums are on 195.78.94.239 you could try entering that instead of a URL to rule out whether the issue is your ISP/DNS or something else.

Open a command prompt and type "netstat -a" without the quotes to see who is connected to you.

Ok all I can see is my pc name, the 69.10.25.25 address, 2.16.165.55, 69.10.24.213

Not sure what I should be looking for.

Entered 195.78.94.239 but it did not load anything. IGN and msn seem to be ok now.

Just had this in the router log:

**TCP FIN Scan** 64.4.21.42, 80->> 192.168.2.29, 58297 (from WAN Inbound)
12/14/2011 13:21:47 **TCP FIN Scan** 64.4.34.157, 80->> my ip, 58377 (from WAN Inbound)
12/14/2011 13:21:47 **TCP FIN Scan** 207.46.124.157, 80->> my ip, 58404 (from WAN Inbound)
12/14/2011 13:21:47 **TCP FIN Scan** 64.4.9.185, 80->> my ip, 58249 (from WAN Inbound)

[mycarsavw]

The IP doesn't load for me either, odd.

netstat should show who is connected to your PC, anything untoward would suggest you have issues. I'd go with blueball's theory of a firewall blip

Edit: 2.16.165.55 belongs to Akamai Technology (Wiki page)

69.10.24.213 is IGN too

[AledJ]

Ok thanks all of you for the help, i'll keep an eye on things but for now things are normal.

Cheers

[blueball]

A bit of googling leads me to understand that the FIN Scan can cause a router to go slow after it happens. If you keep getting these and it is causing your router to need a reboot you may want to look for new firmware or add the relevant external IPs for IGN and Akamai to a whitelist (if your router lets you do that)

[AledJ]

Just have a question about a recent entry I have not seen before:

**TCP SYN,FIN Scan** (home pc)>> 88.104.206.71, 9032 (from WAN Outbound)

Did try to goggle what it was, but didn't have much luck.


edit: only realised this is in the wrong section, could a mod move it?