Just entering "224.0.0.22" into Google you'll get swamped with listings from irritated users. This address appears to be within the range of local IP multicast addresses (http://en.wikipedia.org/wiki/Multicast_address) designated for multicasting on the local LAN only.

Kind of difficult to plow a way through the jungle of google listings. Maybe some kind of worm is active trying to infect the local LAN, maybe some weird OS stuff is nagging users, yet otherwise harmless. The default answer in many Internet forums appears to be -> run a system scan for malware ... yet in those same threads usually *no* definitive clues come up of the type: 'yes, just detected worm xyz'. On the other hand, I haven't found any definitive clue yet, what this multicast stuff is all about and why it should be harmless or harmful. Lawrie, you provided a whole bunch of useful info, which sure takes some time to digest.

The connection message 224.0.0.22 appears to pop up with a variety of Firewalls. On the other hand, Peter uses ZoneAlarm and has never seen such a message. Maybe its a configuration issue between router, PC, and Firewall.

Lawrie, thanks for your info and links. Will run a scan, likely sometime overnight. No definitive clue yet.


Martin