cancel
Showing results for 
Search instead for 
Did you mean: 

Plusnet hub zero ports 554 and 7070 permanently open WAN side !

Protech
Grafter
Posts: 35
Thanks: 20
Registered: 26-09-2017

Plusnet hub zero ports 554 and 7070 permanently open WAN side !

A recent scan with fing from an external host shows ports 554 and 7070 open to the WAN.

Scan date: 19:44 22/12/2017
IP Address: xx.xx.xx
State: Online
Hostname: ****

Active services: 2
554/rtsp Real Time Stream Control Protocol
7070/realserver null

 

The router is configured with a fixed hostname via dyndns and there are no LAN hosts with services on those ports.

My questions are 

1 why is the router opening these ports ?

2 how to disable them from the hub zero ?

 

 

9 REPLIES
Community Gaffer
Community Gaffer
Posts: 13,431
Thanks: 1,187
Fixes: 92
Registered: 04-04-2007

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

Do you have any IP cameras on your network? Could be that they're using UPnP to open these ports.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

Protech
Grafter
Posts: 35
Thanks: 20
Registered: 26-09-2017

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

Hi bob

No ip cameras on the network , but there is a youview box , would that open these ports 😐

Community Gaffer
Community Gaffer
Posts: 13,431
Thanks: 1,187
Fixes: 92
Registered: 04-04-2007

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

They're not ports I recognise being related to Youview/multicast traffic.
FWIW, I can only see the following at your IP:-
Host is up (0.024s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE
4567/tcp open tram
5222/tcp closed xmpp-client
The first of those is for our TR069 remote management.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

Protech
Grafter
Posts: 35
Thanks: 20
Registered: 26-09-2017

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

Hi Bob,
Thanks for checking this one out. It appears to be related to the use of dynamic DNS in some way. These ports are not showing as open when dynamic DNS is not being used.
mrlinux2u
Hooked
Posts: 5
Registered: 06-10-2016

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

old post - but I have static IP and these two ports are showing as open when running nmap -Pn against my IP address, since non of my home computers have these ports open (or are running the relevant software) and my router firewall (and the plusnet firewall) blocks all unsolicited traffic (apart from two ports I want open) can someone at Plusnet explain why these two ports are showing as open?

Moderator
Moderator
Posts: 18,702
Thanks: 1,956
Fixes: 247
Registered: 11-01-2008

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

They don't show open to me on your IP

Customer / Moderator / If it helped click the thumb / If it fixed it click 'This fixed my problem'

mrlinux2u
Hooked
Posts: 5
Registered: 06-10-2016

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

nmap -Pn 80.229.x.x

Starting Nmap 7.01 ( https://nmap.org ) at 2018-05-09 10:21 BST
Nmap scan report for XXX.plus.com (80.229.x.x)
Host is up (0.038s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE
1st port removed for privacy....
554/tcp open rtsp
4567/tcp open tram
7070/tcp open realserver

 

Moderator's note by Adie (Dvorak) obfuscated domain

Moderator
Moderator
Posts: 18,702
Thanks: 1,956
Fixes: 247
Registered: 11-01-2008

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

I get

Nmap scan report for XXX.plus.com (80.229.X.X)
Host is up (0.035s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE
1 open port removed
4567/tcp open tram

so wonder if you're running it from your local network there's an odd loopback?

Customer / Moderator / If it helped click the thumb / If it fixed it click 'This fixed my problem'

mrlinux2u
Hooked
Posts: 5
Registered: 06-10-2016

Re: Plusnet hub zero ports 554 and 7070 permanently open WAN side !

Nmap run from my works IP address - added the -Pn to show all open ports...