Results 1 to 3 of 3

Thread: "LAN access from remote" log entries- port 161/udp is open

  1. #1
    Junior Member
    Join Date
    Nov 2016
    Posts
    2

    Question "LAN access from remote" log entries- port 161/udp is open

    "LAN access from remote" log entries

    Modem: Netgear N450 CG3000DV2
    Firmware Version: V3.01.06
    ISP: Time Warner

    Hi folks,
    I do not know how to configure the router to block this access to Port 161. When I configure rules, they refer to addresses 192.168.0.x. They do not seem to do anything to block the outside access to port 161.

    Remote Management is off.
    Iíve disabled UPnP.
    There are no port forwarding/port triggering rules.
    Iíve disabled the bulk of the services that were enabled when I hard reset the modem.
    The admin password has been changed.
    Wireless is disabled. (I have a DLink access point handling the wireless traffic.)
    Guest Network is disabled.
    No torrents are being run.

    With only the PC attached to the RG, SG security scan still shows port 161 as open. I have checked the open ports on the PC, 161 is not displayed, and portqry says TCP and UDP port 161 are NOT LISTENING

    Any suggestions are appreciated.http://www.speedguide.net/forums/ima...s/confused.gif

    Thanks!
    -Robin


    Description
    Count
    Last Occurrence
    Target
    Source

    [LAN access from remote ]
    1
    Wed Nov 23 21:52:08 2016
    172.xxx.xxx.xxx:161
    12.35.230.2:63433

    [LAN access from remote ]
    1
    Wed Nov 23 21:10:53 2016
    172.xxx.xxx.xxx:161
    196.15.222.185:52181

    [LAN access from remote ]
    1
    Wed Nov 23 17:56:46 2016
    172.xxx.xxx.xxx:161
    12.28.6.226:49679

    [LAN access from remote ]
    1
    Wed Nov 23 07:43:10 2016
    172.xxx.xxx.xxx:161
    185.94.111.1:58981

    [LAN access from remote ]
    2
    Wed Nov 23 07:35:40 2016
    172.xxx.xxx.xxx:161
    212.80.185.174:80

    [LAN access from remote ]
    1
    Wed Nov 23 06:54:13 2016
    172.xxx.xxx.xxx:161
    184.105.139.67:30404

    [LAN access from remote ]
    1
    Wed Nov 23 06:42:34 2016
    172.xxx.xxx.xxx:161
    185.128.40.162:51808

    [LAN access from remote ]
    1
    Tue Nov 22 22:10:00 2016
    172.xxx.xxx.xxx:161
    80.82.64.42:49895

    [LAN access from remote ]
    2
    Tue Nov 22 20:38:30 2016
    172.xxx.xxx.xxx:161
    89.248.168.6:18564

    [LAN access from remote ]
    1
    Tue Nov 22 07:49:36 2016
    172.xxx.xxx.xxx:161
    204.42.253.130:56921

  2. #2
    Administrator Philip's Avatar
    Join Date
    May 1999
    Location
    Jacksonville, Florida, United States
    Posts
    10,268
    Blog Entries
    6
    In general, port 161 udp is used for SNMP, and some providers could use it for device management. Even if that is the case, it should be closed to IPs outside of your ISPs network, which it seems it isn't. You may want to look through the Netgear gateway admin interface and see if there is some option to close SNMP. If not, you may be out of luck and TW could be keeping it open. You can always forward it to a non-existent internal IP address if you'd like.

  3. #3
    Junior Member
    Join Date
    Nov 2016
    Posts
    2
    Thank you, Philip! I will set up the forwarding rule.

Similar Threads

  1. Remove duplicate entries in your "HOSTS" file.
    By Norm in forum General Discussion Board
    Replies: 1
    Last Post: 09-04-04, 01:12 PM
  2. Replies: 11
    Last Post: 03-02-04, 08:03 PM
  3. Port 139 netbios-->"open"
    By irongutz in forum Network Security
    Replies: 5
    Last Post: 02-22-02, 10:35 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •