I see ARP entries for the IP addresses
They are Multicast addresses:
A multicast address is a logical identifier for a group of hosts in a computer network, that are available to process datagrams or frames intended to be multicast for a designated network service.
Multicast addressing can be used in the Link Layer (Layer 2 in the OSI model), such as Ethernet multicast, and at the Internet Layer (Layer 3 for OSI) for Internet Protocol Version 4 (IPv4) or Version 6 (IPv6) multicast.
Further information is provided below, but this kind of activity is normal.
188.8.131.52 is a Internet Group Management Protocol (IGMP) version 3 address.
This is normal traffic, and it stays on your local network.
The Internet Group Management Protocol (IGMP) is a communications
protocol used by hosts and adjacent routers on IPv4 networks to
establish multicast group memberships. IGMP is an integral part of IP
IGMP can be used for one-to-many networking applications such as
online streaming video and gaming, and allows more efficient use of
resources when supporting these types of applications.
IGMP is used on IPv4 networks.
Source Internet Group Management Protocol (IGMP) version 3
184.108.40.206 is a Multicast DNS (mDNS) address.
the multicast Domain Name System (mDNS) resolves host names to IP addresses within small networks that do not include a local name server.
It is a zero-configuration service, using essentially the same programming interfaces, packet formats and operating semantics as the unicast Domain Name System (DNS).
Source Multicast DNS (mDNS)
I've seen those types of requests before - those certainly look much
like Bonjour / mDNS requests to me. They use multicast IP address
220.127.116.11 and port 5353.
The most likely source for this is Apple iTunes, which as you
know comes pre-installed on Mac computers and is a popular install on
UPDATE: if this is a Linux box (not a Mac or Windows box), that's
probably the Avahi daemon then. Its ZeroConf/Bonjour
compatible. Its installed by default, but if you don't use DNS-SD
or mDNS, it can be disabled.
Source what is the multicast doing on 18.104.22.168? answer by suman
22.214.171.124 is a Link-local Multicast Name Resolution (LLMNR) address.
The Link-Local Multicast Name Resolution (LLMNR) is a protocol based
on the Domain Name System (DNS) packet format that allows both IPv4
and IPv6 hosts to perform name resolution for hosts on the same local
It is included in Windows Vista, Windows Server 2008, Windows 7,
Windows 8 and Windows 10. It is also implemented by systemd-resolved
LLMNR is defined in RFC 4795.
Source Link-local Multicast Name Resolution (LLMNR)