none
ICMP Request from Windows 10 Computers to Microsoft servers RRS feed

  • Question

  • Hi Everyone,

    Is anyone able to shed some light on why i have some windows 10 computers making ICMP requests to Microsoft ip addresses in 5 or 6 different countries?

    I only have about 4 computers doing this?

    I did a wireshark and it seems to be windows update but not sure why it uses icmp and why its only 4 computers.

    Any help appreciated.

    Regards

    Paul


    • Edited by WAPaul Thursday, December 5, 2019 4:43 AM
    Thursday, December 5, 2019 4:42 AM

Answers

  • Hi ,

    >>some of the the addresses i am getting are:
    http://13.107.21.200/
    http://204.79.197.200/

    Yes ,these IP address are resolved to the Microsoft Corporation, location in the USA.

    Windows 10 uses a lot of technologies that require your system to contact Microsoft servers, Windows Automatic Update, telemetry, usage statistics, error reporting . . . etc.

    As far as I know, you don't need to worry about it and it should be safe.

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Monday, December 9, 2019 7:15 AM

All replies

  • Hi Paul,

    Thanks for your posting here.

    >>i have some windows 10 computers making ICMP requests to Microsoft ip addresses in 5 or 6 different countries?

    Have your checked if the Microsoft IP address point to the following address?

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Thursday, December 5, 2019 6:55 AM
  • Hi Paul,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.                   

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Monday, December 9, 2019 6:18 AM
  • Hi Candy,

    some of the the addresses i am getting are:

    http://13.107.21.200/

    http://204.79.197.200/

    which are registered Microsoft addresses:


    When i try to do a capture with NETSH the traffic stops.

    Whats with that?

    Regards

    Paul


    Monday, December 9, 2019 6:55 AM
  • Hi ,

    >>some of the the addresses i am getting are:
    http://13.107.21.200/
    http://204.79.197.200/

    Yes ,these IP address are resolved to the Microsoft Corporation, location in the USA.

    Windows 10 uses a lot of technologies that require your system to contact Microsoft servers, Windows Automatic Update, telemetry, usage statistics, error reporting . . . etc.

    As far as I know, you don't need to worry about it and it should be safe.

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Monday, December 9, 2019 7:15 AM
  • Hi Paul,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Wednesday, December 11, 2019 1:29 AM
  • Hi Paul,

    If you have any concerns, please feel free to let me know.

    You could mark the useful reply as answer if you want to end this thread up.

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Thursday, December 12, 2019 1:29 AM
  • Hi Candy,

    Thats as close as i am going to get at the moment.

    Just annoying that i can pinpoint exactly what it is.

    Regards

    Paul

    Thursday, December 12, 2019 2:31 AM
  • Hi ,

    >>Just annoying that i can pinpoint exactly what it is.

    I did not find any official document talking deeper about it. If we want to know exactly the purpose of these ICMP request. We might have to analyze the traffic to find the clues. Unfortunately, from forum support level, analysis of packet capture is beyond our scope.

    Anyway, these ICMP request to Microsoft IP address should be safe.

    In addition, thanks for your efforts you have put into this case.

    Best Regards,

    Candy



    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Thursday, December 12, 2019 2:40 AM