topic Re: Ports 554, 7070 ?? (and 4567) in My Router

Ports 554, 7070 ?? (and 4567)

1R27cD5n — Thu, 02 Jan 2025 19:53:15 GMT

Hi,

I have nmap scanned my network, and it finds open ports:

554 rtsp
7070 realserver
4567 TR-069

I underrstand 4567 is to allow hardware updates from PN (my routerd last update was in 2021, PN kindly sent me through a new Hub, which I will install tomorrow).

The next two ports I am not sure if these are the router, or some other device behind the router (of which there are few).

7070 RealServer ?? this from what I can see is an SQL server.

And

554 rtsp - this is reported as a 'Streaming protocol', commonly used by CCTV

Could anyone explain if the 7070 and 554 are Plus Net Router ports left open - such as the 4567 ? and can they be closed.

Any thoughts appreciated.

Re: Ports 554, 7070 ?? (and 4567)

iannewson — Sat, 04 Jan 2025 22:53:54 GMT

https://hackerific.net/2016/03/20/false-positive-tcp-ports/

Re: Ports 554, 7070 ?? (and 4567)

1R27cD5n — Sun, 05 Jan 2025 17:37:13 GMT

Thanks, very helpful, I will use the methods in the post to scan my network, so maybe they are falsly reported, and/or are being picked up along the way.

Re: Ports 554, 7070 ?? (and 4567)

Dan_the_Van — Sun, 05 Jan 2025 18:28:59 GMT

@1R27cD5n

I do not see those posts open on the Hub two I use using https://www.ipvoid.com/port-scan/

The ports you mentioned are all 'filtered'

Re: Ports 554, 7070 ?? (and 4567)

1R27cD5n — Mon, 06 Jan 2025 11:30:18 GMT

Thanks, but I wasn't sure of the results when I used that Tool on my IP, I presume as its a web service it can be used from the browser within your network, to look in, so to speak.

When I scan a specific port (554 and 7070) and All Ports, I am not sure how to interpret the results, the All Ports scan - simply lists all the popular ports, a long list, those are not open on my network for sure.

Maybe I am using it incorrectly, any tips ?

I will Nmap scan my network using the above posted switches and methods, when at another location today.

Re: Ports 554, 7070 ?? (and 4567)

Dan_the_Van — Mon, 06 Jan 2025 11:51:31 GMT

I would expect using the link I provided it will be testing your Hub from a foreign network.

As you are aware it is important to check for open ports from outside your private network using your current public IP Address

Re: Ports 554, 7070 ?? (and 4567)

1R27cD5n — Mon, 06 Jan 2025 12:04:55 GMT

Yes I will test it from outside with Nmap later today.

Using GRCs Sheilds Up:
https://www.grc.com/x/ne.dll?rh1dkyd2

It reports all is in order and as expected, ie 554 and 7070 closed.

Using Sheilds up I have been able to scan the following ports 1-1026:

443 open

554 Stealth

and specific ports above 1026:

4567 Open

7070 Stealth

... and it reports 443 as open, which is HTTPS for an IOT server I have.
and ...
554 and 7070 as 'Stealth', ie closed.
4567 is open, but I understand this is/was used by PN to update firmware on the router.

Will ee what my more detailed Nmap scans pick up later today.