For certain IPs, I can ping them but not connect via TCP

[Milo212]

I've identified a couple of IPs (192.124.249.10 and 192.124.249.16) that I can ping/tracert with no problem, however I cannot connect to their open ports (80 and 443). Wireshark shows my SYN packets being sent, but with no response. Here is some relevant info:

• I can connect to other IPs just fine (well, at least that I know of; I suspect the whole block of IPs is affected)
• Windows Firewall is disabled
• I see the same behavior with a USB wifi card, my build in wifi card, and an ethernet connection
• I am able to connect with a VM on the machine when using the USB wifi card directly, i.e. when bypassing the Windows drivers and whatnot
• I see the same behavior no matter where I connect from, e.g. hotels, etc.
• I've scanned for viruses and rootkits with no results

I took a look at all my installed drivers, but I don't really know what to look for. Any advice on troubleshooting this issue would be appreciated; thanks!

 

[Tranquil Hegemo]

First question - why are you trying to connect to those addresses and secondly, what do you hope to achieve should you gain access?

As to why the aren't responding there are myriad reasons why they might not be responding (other than to ping\tracert) but in short none of those are related to anything on your windows machine.

 

[Milo212]

Um, what I'm "hoping to achieve" is to browse to a website (e.g. Sucuri Security — We Secure Your Website) thus my mention of ports 80 and 443.

As far as your statement that the reason why the servers are "not responding" has nothing to do with my Windows box, I suspect that the syn packets are not even making it onto the wire. In any event, as I mentioned in my OP, the sites do indeed respond when I bypass my machines drivers. I'm sure if you navigate to the securi.net link you will see that it is indeed responding on ports 80 and 443.

 

[Tranquil Hegemo]

What I picked up on from you OP was that you are trying to access two routable IP addresses on ports 80 and 443 with no context and for no discernible reason. Had you made it clear that you were trying to connect to a specific website on those IP addresses then it would have made things a lot clearer and quite probably wouldn't have raised a red flag on my behalf immediately.