Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Hundreds of TCP FIN scans while playing leagueoflegends causing lag.

13 Jul 2013   #1
Domenique01

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 
Hundreds of TCP FIN scans while playing leagueoflegends causing lag.

Hello,

I have been playing a game (League of Legends) for a long time. When I start playing I get insane lag, of course I checked all the troubleshooting on the games forums and tried (almost) all the solutions. Nothing worked.
Today I decided to look into my routers logs, this (see beneath) showed up during the game, and stopped immediately after ending the game. Ill post a short version of the log, otherwise this thread will look awful.

07/12/2013 23:11:55 **TCP FIN Scan** 85.181.210.124, 65003->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 88.180.185.159, 61388->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 2.11.48.117, 63417->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 90.194.97.66, 58752->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 188.64.36.169, 62702->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 188.82.224.241, 58390->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 95.34.148.81, 60873->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 62.16.143.136, 55252->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 88.161.199.48, 59859->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 83.254.212.226, 56239->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 84.86.28.104, 64540->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 90.22.62.89, 56845->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 149.172.46.48, 60235->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 91.91.185.33, 1420->> 192.168.2.10, 57058 (from ATM1 Inbound)

This happens every second of playing, more than 20 incoming scans per second.
All targeted at a local IP address not in use.
When using a random IP-lookup site all the IP's seem to come from Europe.
It even looks like it is all from EU-west, the server where I'm playing.

Please help, its something I've never seen before. And I cannot find alot about TCP FIN scans.




Attached Thumbnails
Hundreds of TCP FIN scans while playing leagueoflegends causing lag.-ipconfig.jpg  
My System SpecsSystem Spec
.

16 Jul 2013   #2
diplo

Windows 7 Profession x64
 
 

It's hard to say whether this is malicious or a false positive. To me it seems less likely that it's a distributed scanning attack and more likely that something is trying to close a connection. Here's some of what's happening during a FIN handshake. This article by Novell briefly touches on what a FIN scan does. Can you delete the DHCP lease going to the local IP in an attempt to stop it? Can you be sure that there are no other machines on your network that could be responsible for this traffic? If you are able or willing to do a factory reset on your router, this could be a step worth taking and go from there.
My System SpecsSystem Spec
22 Jul 2013   #3
Domenique01

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

If did not receive any other "FIN scans" so I guess my problem is over.
I could not find where to delete the lease going to the local IP, but it expired automatically after 24 hours.
Also I did reset the router to factory settings because there were multiple problems at the same time, most of them are over now!

I'll mark this as solved
My System SpecsSystem Spec
.


Reply

 Hundreds of TCP FIN scans while playing leagueoflegends causing lag.




Thread Tools





Similar help and support threads
Thread Forum
Standard VGA graphics adapter problem LeagueOfLegends
]Could someones help me, ive trieed to play League of Legends but i can't because when i try to play it says ''An unknown DirectX error has occurred and League of Legends cannot start. Please make sure your video card is using the latest video drivers from the manufacturer'' and it closes. ...
Graphic Cards
Event Viewer, hundreds of errors
The Cryptographic Services service terminated unexpectedly. It has done this 403 time(s). The device, \Device\Harddisk0\DR0, has a bad block. The DNS Client service terminated unexpectedly. It has done this 48 time(s). The first one is there every one in three errors. Am I completely screwed...
Performance & Maintenance
BSOD playing leagueofLegends,cdd.dll (cdd!DrvAssociateSharedSurface+7b
Hi , i ve been playing lol over 1 year and i didnt get a single BSOD on my laptop until 2 months ago. After that I have had BSODs when i play lol when I am in loading screen, sometimes when I im changing tabs or sometimes in main menu screen. I only get BSOD when i open lol. Im bad when it comes to...
BSOD Help and Support
BSOD when playing BF3. ntoskrnl.exe seems to be causing it?
Hello all, Relative computer noob that somehow built his own computer a few years ago lol. Recently I have been getting the dreaded BSOD almost everytime I play BF3, and I am finally deciding to try to get some help on the matter. The causes seem to vary however I've noticed that ntoskrnl.exe...
BSOD Help and Support
Deleting Hundreds of .PNG files
I have literally many hundreds of .png files that serve no apparent function other than clutter. When I try to delete them the message is, "You require permission from "TrustedInstaller" to make changes to this file". "Unlocker" can delete these files but only one at a time. Is there software out...
General Discussion
Lock-up after hundreds of EventID 15
Earlier today when I started up my computer it seemed to work as usual, I only had Firefox open so nothing demanding was running but when I started up Media Player Classic it kept messing up the sound every few seconds and froze from time to time. I opened up the Taskmanager but didn't see much...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:06.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App