I have blocked an Ip address, but event veiwer is showing it

[ianburns5]

Hi hope someone can help

I recently blooked the following IP address 239.255.255.250 on Windows defender  Inbound and outbound, but when i log onto my pc i see these entries as below

I am not sure what this means,, or if i am infected, Malwarebytes are not showing anything

any help will be greatly welcomed

 

1

2

3

4

 

[David H. Lipman]

It is just a LAN communication for Universal Plug 'n Play (uPnP) and the Simple Service Discovery Protocol (SSDP) and is a MultiCast address.

This is not indicative of being infected.

[ianburns5]

ok Dave

Thank you i am a newbie, so trying to understand,, should i remove it from my Firewall block list?

[David H. Lipman]

The source and destination addresses are mixed-up.

The Source address is the local PC which is designated by the IP;  127.0.0.1

The Destination is the MultCast address of;  239.255.255.250

If you are a newbie, I don't understand why to would block uPnP on a PC.  I can understand why you may block it on a Border Gateway or Router or are using Smart Ethernet Switch (aka; Managed Switch) and want to filter LAN activity.

 

[ianburns5]

Hi Dave

 

I was trying to learn... i saw this ip addredd and looked it up and found was reported,  as i siad i am a newbie , so i did the only thing i knew to do following instructions on how to block it on my firewall

https://www.abuseipdb.com/check/239.255.255.250

[David H. Lipman]

It is a Local Area Network (LAN) protocol address being a MultiCast address so you may want your Notebook/Laptop to communicate with other LAN nodes using SSDP.  But you don't want the Internet accessing it and that why one may want to block it on a Border Gateway or Router so there is no Wide Are Network (WAN or Internet)  to LAN SSDP activity.

There are many LAN devices such as SmartTV's and  Roku that use SSDP.

Edited November 1, 2022 by David H. Lipman
Edited for content, clarity, spelling and/or grammar

[David H. Lipman]

Anything else @ianburns5 ?

[David H. Lipman]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you