Robbie

Level 27
Verified
Content Creator


I keep getting firewall's alerts that a connection was created by the application of League of Legend's launcher up to a random IP that usually changes. It's weird, since no game ever did this to me, not even a game client like Steam. I am for certain that I'm not infected, but what is this? Telemetry? Holy mother of God I get alerts every three minutes.
 

upnorth

Level 31
Verified
Trusted
Content Creator
Personal I have no idea how that game works along with it's host and clients connections. If I was you I would probably check and try backtrack a few of those IPs, just to be better sure they aren't malicious.
 

redsworn

Level 3
Verified
I never played League so I don't exactly know. But generally speaking some online games with multiple regional severs tend to check the latency to these servers periodically in the background. It helps the game to determine servers with lowest latency in your region. And judging from the timestamp patterns, it's just might what actually happens. You might still want to check those IPs just to be safe though.
 
  • Like
Reactions: upnorth

MrBananaxx

Level 2
It creates a new rule at every single update, that's why.
Edit: Nervermind i didn't see the time, so i don't think it's that. :emoji_thinking:
 

davisd

Level 1
Verified
Open "Store"/"Champion reveal", at the same time keeping Network connections open at background, you'll see that LeagueClientUx.exe will create a billion more connection's on the fly, just left click and "Resolve host names", they are completely fine, that's just how League works. I haven't seen it connect to a malicious server ever. Personally, I ignore those and don't pay any attention, unless Eset would ever warn about something particulary suspicious..
 

Deletedmessiah

Level 22
Verified
Content Creator


I keep getting firewall's alerts that a connection was created by the application of League of Legend's launcher up to a random IP that usually changes. It's weird, since no game ever did this to me, not even a game client like Steam. I am for certain that I'm not infected, but what is this? Telemetry? Holy mother of God I get alerts every three minutes.
How to show that in Eset? Is it by logging?
 

TairikuOkami

Level 23
Verified
Content Creator
I would not worry about it. Most are obvious CDNs:

34.192.0.0 - 34.255.255.255 - Amazon
52.32.0.0 - 52.63.255.255 - Amazon
99.83.64.0 - 99.84.255.255 - Amazon
104.16.0.0 - 104.31.255.255 - Cloudflare

And the last IP is probably your public IP or a local server, provided by lacnic.net. Not going to type it down, so robots could grab it. :giggle:
 
Last edited:
  • Wow
Reactions: Deletedmessiah