Belkin router firewall security log

[eurolarva]

I am getting multiple lines like this in my security log under Firewall on my router

**TCP FIN Scan** 74.217.78.140, 80->> 192.168.2.2, 51862 (from WAN Inbound)

I am getting maybe 10 of these at the same time then a couple minutes a new set will show up. I checked all my computers for bots and ran two virus scans on each computer and cant find anything wrong. I have googled the issue and have not seen if this is really anything to worry about or if someone is trying to spam my network. Anybody here have any good reading on this or ideas?

[delcecchi]

It is coming from the internet "WAN" wide area network. There are all sorts of folks out there scanning for fools with no firewalls or open ports. At least that is what I think is going on. The firewall on your computer will show no hits because they are blocked by the router.

[upnorth]

You outta see the firewall logs from known business. Del is spot on. There a lot of hackers out there scanning for public addresses with open ports. They are looking for easy targets. The inbound is the tell tale portion of the lot.

If you see a bunch of really strange outbound traffic your PC may have been compromised. But until you get familiar with firewall logs most of it looks pretty cryptic anyways.

[eurolarva]

So I am noticing some of them are outbound. The outbound ones being blocked by the fire wall are happening before anyone here is awake. My daughter leaves her computer on all night the rest are either shut down or wifi is disabled. I scanned all computers for virus and found none using AVG and House call by Trend Micro. Is this something I should be aware of. I have seen no intrusions on my software firewalls on any of my computers.

[upnorth]

Running a malware removal app may help. But there is any number of things that may want to try to go out and some may be blocked. There are known used by malware ports that may be blocked.

[eurolarva]

I ran adaware and found 4 minor ones that I removed. I will keep an eye on it. I am guessing there is not much I can do about it. Thanks for the advise.

[Jim Jensen]

That IP address belongs to a company/HSOforum adap(dot)tv. Looking at the HSOforum the company appears to be some sort of advertising company that specializes in video advertisements. I searched for information about the port number in question but didn't find any specific information. I would guess it some sort of program installed intentionally or not that is trying to download a video ad to one of your computers.