Windows 7 Concerns About Persistent UDP Out Connection to Microsoft on Windows 7

Camu

New Member
Joined
Nov 26, 2011
Messages
4
I recently installed windows7 x64 on my desktop and Comodo firewall report this


UDP OUT 192.168.1.2:58258 Destination 94.245.121.251:3544

That address seems to belong to Microsoft, the connection is there permanemtly and if terminated it reappears. Could not find much on the net about this, only a suggestion that disabling Teredo Tunnelling will prevent it.
Get a bit agitated when I see connections I did not allow throught the firewall.
Does anyone know what it is?

Thanks
 

Solution
The connection you are seeing in your Comodo firewall logs appears to be related to a UDP traffic going out from your system to an IP address that belongs to Microsoft. Here's some information that might help clarify the situation:
  1. UDP Traffic: UDP stands for User Datagram Protocol, which is one of the core protocols of the Internet Protocol suite. UDP is used for sending short messages which don't require the reliability provided by TCP (Transmission Control Protocol).
  2. IP Addresses: The IP address 192.168.1.2 is a local IP address assigned to a device on your local network. The destination IP address 94.245.121.251 is indeed owned by Microsoft. Microsoft uses various IP addresses for different services, so it's...
The connection you are seeing in your Comodo firewall logs appears to be related to a UDP traffic going out from your system to an IP address that belongs to Microsoft. Here's some information that might help clarify the situation:
  1. UDP Traffic: UDP stands for User Datagram Protocol, which is one of the core protocols of the Internet Protocol suite. UDP is used for sending short messages which don't require the reliability provided by TCP (Transmission Control Protocol).
  2. IP Addresses: The IP address 192.168.1.2 is a local IP address assigned to a device on your local network. The destination IP address 94.245.121.251 is indeed owned by Microsoft. Microsoft uses various IP addresses for different services, so it's not unusual to see connections to Microsoft IPs.
  3. Connection: The connection you are observing might be related to various Windows services or updates that communicate with Microsoft servers for various purposes like updates, telemetry, or system health checks.
  4. Teredo Tunneling: Teredo is a transition technology that gives full IPv6 connectivity for IPv6-capable nodes that are on the IPv4 Internet but have no direct native connection to an IPv6 network. It's used to enable connectivity to IPv6-only services through IPv4 networks. Disabling Teredo might affect certain functionalities on your system. If you are concerned about this connection and want to investigate further, you can do the following:
    • Check the list of installed programs on your system to see if any Microsoft-related services could be responsible for these connections.
    • Look at the running services or background processes to identify any that might be related to this connection.
    • You can also monitor the network traffic using tools like Wireshark to get more detailed information on the nature of this connection.
    If you're still unsure or want more precise information, you can also consult Microsoft's official documentation or community forums for Windows where similar cases might have been discussed. Let me know if you need any further assistance!
 

Solution
Back
Top