port 49152 raop

[Majordomo]

It’s my first post here. Yay! Happy to have found this site. We’ve been battling malware, compromised cellphones and all sorts of digital weird this year. Staying viligant i ran some scans on my home network and discovered a new port 49152 filtered tcp. I have not seen it before and was hoping for some help. My scanner labeled it a raop air drop audio listening port. Not sure about it. Plus when I scan my external IP, the scanning software shows it as based in the European Union but a check of the IP puts it with Comcast in the USA? So I don’t know what to ,are of it.

Equipment note:
I have the crappy Comcast gateway Arris model and I want to get rid of it and buy a real modem router firewall so any input on brands and models appreciated. There’s been a known vulnerability on this gateway since last summer and yet Comcast has not put out a patch. I am taking a proactive approach to our network security I have learned a lot this year but I have a ton more to learn..... so here I go.

Thanks

[Philip]

49152 is the first dynamic listening port, and as such it is used by many UPNP, embedded linux devices, etc. You can look through a list of the most common ones here:
https://www.speedguide.net/port.php?port=49152

[Majordomo]

Great, thank you. ok, how do I close it? I also have udp 5353 open too. What is like to do is be able to capture what transmits in these ports.... what software do,I need for that? Appreciate the help and suggestions

49152 is the first dynamic listening port, and as such it is used by many UPNP, embedded linux devices, etc. You can look through a list of the most common ones here:
https://www.speedguide.net/port.php?port=49152

[Philip]

There is some info on how to find out what process is listening to a specific port here:
https://www.speedguide.net/faq/how-t...y-computer-115

I hope this helps.