Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: PLease help, going crazy! IP 239.255.255.250 over and over

24 Nov 2011   #1

Windows 7 64 bit
 
 
PLease help, going crazy! IP 239.255.255.250 over and over

Ok, so this is a complicated question, and Im not too computer savvy, but Im hoping someone can help me.

On my peerblock (I dont use p2p programs...although I used to) I keep seeing over and over again it blocking an IP named State of Connecticut239.255.255.250 , and I also see 224.0.0.251 from time to time. I disabled upnp, and ssdp. I even went and disabled the Mulicast IPv6, and it still shows up over and over. I try and ping those IP and it receives nothing.....which I assume it means it sending me something? Anyone have any clue what this is? Is this the SOC tracking me or something? Any insight would be greatly appreciated.

Im using a VPN hotspotshield Windows 7 with peerblock on.

???

My System SpecsSystem Spec
.

25 Nov 2011   #2

Windows 8 Pro 9200 x64 w/Media Center
 
 

Host Extensions for IP Multicasting [RFC1112] specifies the extensions
required of a host implementation of the Internet Protocol (IP) to
support multicasting. The multicast addresses are in the range
224.0.0.0 through 239.255.255.255. Address assignments are listed below.

The range of addresses between 224.0.0.0 and 224.0.0.255, inclusive,
is reserved for the use of routing protocols and other low-level
topology discovery or maintenance protocols, such as gateway discovery
and group membership reporting. Multicast routers should not forward
any multicast datagram with destination addresses in this range,
regardless of its TTL.

for more look here... http://www.iana.org/assignments/mult...-addresses.txt
My System SpecsSystem Spec
25 Nov 2011   #3

Windows 7 64 bit
 
 

Thank you, but why does it say State of Connecticut? I also notice it on
192.168.1.255. I see this literally 100's of times a day...please help
My System SpecsSystem Spec
.


25 Nov 2011   #4

Windows 8 Pro 9200 x64 w/Media Center
 
 

these are NetBIOS requests, netbios is very old and has been replaced
by dns and therefore can be disabled.

In order to disable NetBIOS over TCP/IP you should go to
Network and Sharing Center then change adapter settings. right click on your wireless and select Properties.
Click on the ipv4 and then the properties button, advanced, go to the wins tab and disable tcp over netbios

The only time that netbIOS needs to be left enabled is when there are
computers on your network running older microsoft operating systems
(anything before 2000, eg win 98, 95)
My System SpecsSystem Spec
25 Nov 2011   #5

Windows 7 64 bit
 
 

I did this, but I still see it showing up over and over. What could this be? Is there a porgram on my computer doing this I can stop and find out what it is?
My System SpecsSystem Spec
25 Nov 2011   #6

MS Windows 7 Home Premium SP1 64-bit (Family Pack Lic.) Upgrade
 
 

have you run any scans?


192.168.1.255 = IANA (Internet Assigned Numbers Authority) - this address block is not broadcast by the IANA, but simply reserved - so you would not be receiving "credible" broadcasting served from this location.

The other numbers may be trying to send to your network to aid in network location discovery and your system is stoping the outgoing packets (I guess it could be another computer on the network tx-ing, but that would be real easy to find out - disconnect them all but the one you speak of.) I read about something recently where a incorrect/spoofed routing table led to these local signals being sent out across the Internet, instead of looking for upup or printers and so on locally, (possibly by malicious software altering the routing tables?)

any mention of port numbers?

have you checked your hosts file. And no simply turning off TCP over NetBIOs will not stop NETBIOS BROADCASTING
My System SpecsSystem Spec
26 Nov 2011   #7

Windows 7 64 bit
 
 

Ok, I THINK I got it to stop ( at least for the past few hours after I disabled it), but does anyone have any idea WHY it would say State of Connecticut?! Does this mean a multicast on my machine is trying to send something to the SOC?!

Ive seen it show up on port 1900 and 3702
My System SpecsSystem Spec
26 Nov 2011   #8

MS Windows 7 Home Premium SP1 64-bit (Family Pack Lic.) Upgrade
 
 

I'll have to get back to you, im in the middle but 1900 port is what i was lookin for.... i'll return...give me a minute please

mike
My System SpecsSystem Spec
26 Nov 2011   #9

MS Windows 7 Home Premium SP1 64-bit (Family Pack Lic.) Upgrade
 
 

Okay...first of all: are, or were, the following services running at the time of the issue:
1.) SSDP disc.
2.) UPNP
My System SpecsSystem Spec
26 Nov 2011   #10

MS Windows 7 Home Premium SP1 64-bit (Family Pack Lic.) Upgrade
 
 

the ports you mentioned are UDP UPNP ports - which means there's some process(es) on your system which are most likely not malicious, although I cant know for sure. But they are transmitting a message query intended for local network devices upnp's (such as a server, a printer, fax, etc) using the ip's you mentioned such as 239.255.255.250 and so on, so your computer detects this process trying to tx and stops it before it has a chance to get to your network, where you probably either no longer have the upnp's it's trying to reach, or it is just an artifact of unknown numerical origin! as for the SOC...1st off if you are as paranoid as you sound (to my trained ears/eyes) you sound like there might be a reason to be worried, no need to share, but it would tend to place more significance on the name. I suspect the IP that was intended to be used for entirely different purposes (like i said..local network com.) so the address would have a normal connection in the "Internet world" so it's probably in your DNS cache which you should flush, your hosts file which should be checked and kept up to date by your choice of methods (you sound like you can handle it, but I can get you some links to software and help you create a executable batch file that will automate much of the process. But I would stop, disable those two services and block the two ports as they are not necessary. No one is trying to find you or anything, for one because it would be such a crude and 95% failure rate prone, they would use a much more sophisticated method to hunt their prey. If the hosts and flushing do not stop the name, then the ip may simply belong to the SOC just like the other on I mentioned was a "sterile" or non transmitting/non receiving ip from IANA.

Sincerely,
Mike
My System SpecsSystem Spec
Reply

 PLease help, going crazy! IP 239.255.255.250 over and over





Thread Tools



Similar help and support threads for2: PLease help, going crazy! IP 239.255.255.250 over and over
Thread Forum
im going crazy!! Hardware & Devices
Going crazy!! BSOD Help and Support
please help me..im getting crazy.. System Security
My CPU is going crazy - sometimes Performance & Maintenance
Solved Am I crazy?? Customization
thats just crazy Chillout Room

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:09 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33