Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Hundreds of TCP FIN scans while playing leagueoflegends causing lag.

13 Jul 2013   #1

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 
Hundreds of TCP FIN scans while playing leagueoflegends causing lag.

Hello,

I have been playing a game (League of Legends) for a long time. When I start playing I get insane lag, of course I checked all the troubleshooting on the games forums and tried (almost) all the solutions. Nothing worked.
Today I decided to look into my routers logs, this (see beneath) showed up during the game, and stopped immediately after ending the game. Ill post a short version of the log, otherwise this thread will look awful.

07/12/2013 23:11:55 **TCP FIN Scan** 85.181.210.124, 65003->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 88.180.185.159, 61388->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 2.11.48.117, 63417->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 90.194.97.66, 58752->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 188.64.36.169, 62702->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 188.82.224.241, 58390->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 95.34.148.81, 60873->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 62.16.143.136, 55252->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 88.161.199.48, 59859->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 83.254.212.226, 56239->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 84.86.28.104, 64540->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 90.22.62.89, 56845->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 149.172.46.48, 60235->> 192.168.2.10, 57058 (from ATM1 Inbound)
07/12/2013 23:11:55 **TCP FIN Scan** 91.91.185.33, 1420->> 192.168.2.10, 57058 (from ATM1 Inbound)

This happens every second of playing, more than 20 incoming scans per second.
All targeted at a local IP address not in use.
When using a random IP-lookup site all the IP's seem to come from Europe.
It even looks like it is all from EU-west, the server where I'm playing.

Please help, its something I've never seen before. And I cannot find alot about TCP FIN scans.



Attached Thumbnails
Hundreds of TCP FIN scans while playing leagueoflegends causing lag.-ipconfig.jpg  
My System SpecsSystem Spec
.

16 Jul 2013   #2

Windows 7 Profession x64
 
 

It's hard to say whether this is malicious or a false positive. To me it seems less likely that it's a distributed scanning attack and more likely that something is trying to close a connection. Here's some of what's happening during a FIN handshake. This article by Novell briefly touches on what a FIN scan does. Can you delete the DHCP lease going to the local IP in an attempt to stop it? Can you be sure that there are no other machines on your network that could be responsible for this traffic? If you are able or willing to do a factory reset on your router, this could be a step worth taking and go from there.
My System SpecsSystem Spec
22 Jul 2013   #3

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

If did not receive any other "FIN scans" so I guess my problem is over.
I could not find where to delete the lease going to the local IP, but it expired automatically after 24 hours.
Also I did reset the router to factory settings because there were multiple problems at the same time, most of them are over now!

I'll mark this as solved
My System SpecsSystem Spec
.


Reply

 Hundreds of TCP FIN scans while playing leagueoflegends causing lag.





Thread Tools



Similar help and support threads for2: Hundreds of TCP FIN scans while playing leagueoflegends causing lag.
Thread Forum
Disabling USB devices - hundreds of them Hardware & Devices
BSOD when playing BF3. ntoskrnl.exe seems to be causing it? BSOD Help and Support
Deleting Hundreds of .PNG files General Discussion
indexing and searching hundreds of PDFs Software
Hundreds of NTFS 55 errors on external hd Performance & Maintenance
Lock-up after hundreds of EventID 15 BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:18 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33