Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Random Applications Are Trying To Connect To 224.0.0.22


  • Please log in to reply
5 replies to this topic

#1 Spock7291

Spock7291

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:01:46 AM

Posted 24 November 2005 - 12:10 PM

I am running WinXP SP2 behind a Netgear Router with Sygate Personal Firewall, AVG AntiVirus, Spybot S&D resident Tea Timer.

For some time now I have been getting random mysterious attempts by totally unrelated applications to communicate with IP 224.0.0.22

Obviously, I have denied all such requests and have gone so far as to ban it in my firewall but would much prefer to find out why the connection requests are happening in the first place.

I have tried other fora for answers but have never had any luck. Now it's your turn. :thumbsup:

I hope someone here can provide an answer before I take the cowards way out and simply do a full system restore.

BC AdBot (Login to Remove)

 


#2 donzo44

donzo44

  • Members
  • 39 posts
  • OFFLINE
  •  
  • Location:Carnoustie, UK
  • Local time:06:46 AM

Posted 24 November 2005 - 04:17 PM

Hi

Google for 224.0.0.22 came up with these and others:

http://www.dslreports.com/forum/remark,9627471
http://www.riverstonenet.com/pdf/igmp.pdf
http://www.networksorcery.com/enp/protocol/ip/multicast.htm

Regards

Bryan
Dual Opteron 250's, 1.6TB, youngest son still at home, large electricity bill

#3 Spock7291

Spock7291
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:01:46 AM

Posted 24 November 2005 - 10:10 PM

Thanks donzo44 but I'm not sure any of the links you gave mean anything to me.

The first one shows me someone else has the same problem.

The second shows Internet Specs.

And the third shows who owns the IP.

None of the above answers my questions of "Why did this start happening?" and "How do I get rid of it?"

#4 raw

raw

    Bleeping Hacker


  • Members
  • 2,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:01:46 AM

Posted 24 November 2005 - 11:24 PM

They are Multicast addresses on the local network.
You can safely block these at the firewall,although they never
leave the Local Area Network.

Here's a link to disable Multicasting.
Warning: Editing the registry can damage your computer.

http://www.winguides.com/registry/display.php/890/

rawsig.png

 rawcreations.net          @raw_creations


Current systems: WHAT OS, BackTrack-raw, PCLinuxOS, Peppermint OS 6, Kali Linux

and a custom Linux From Scratch server hosting a bunch of top secret stuff.


#5 Spock7291

Spock7291
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:01:46 AM

Posted 25 November 2005 - 03:31 AM

OK, can you tell me why it started giving me problems?

The only change that I was aware of just prior to the beginning of the attempts was that I had installed GoogleTalk but I didn't start getting requests for IP 224.0.0.22 until at least a week after that.

I don't guess it really matters now, I will be blocking the IP in my firewall but I do hate a mystery.

#6 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:12:46 AM

Posted 25 November 2005 - 08:58 AM

Have you run Spybot S&D, or Adaware? Have they detected any spyware?
"2007 & 2008 Windows Shell/User Award"




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users