News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • Need help with GRC Port scan results

    Home Forums Networking – routers, firewalls, network configuration Need help with GRC Port scan results

    • This topic has 11 replies, 4 voices, and was last updated 1 month ago.
    Viewing 5 reply threads
    • Author
      Posts
      • #2373161
        dmt_3904
        AskWoody Plus

        I am using a router at a friends. Staying here for a couple days, so I checked the router on GRC before I started using it.  Most of the ports are closed with some open! I logged onto the router and everything looks OK. I’m familiar with the set up because I had a one of same brand. Firewall is set up properly.  I turned off UNPNP & WPS.  I don’t understand why the public IP address that’s being tested on grc shows closed (not stealth) & open ports. Can somebody help me understand? The Internet service is DSL, I don’t know if that makes a difference.

      • #2373162
        Kirsty
        Manager

        Is there a particular range the open ports are in?

        • #2373168
          dmt_3904
          AskWoody Plus

          There are 3 open ports in a row, five total open ports. Rest are closed except for a couple stealth. But this is interesting – I had done a UNPNP test which came back – No Response.  I had not logged onto the router yet and when I did I found UNPNP was not turned off!  So is it possible this address is on the ISPs router?  Which is still not good but how can it be this router? The firewall is on and when I had tested my router with the same firewall it came back all stealth.

          I checked all devices on the network and there are two I don’t recognize.  The MAC addresses are: Delta electronics and Espessif.  I don’t know what Delta is.  Espressif  is a Chinese company that provide chips for IoT and Wi-Fi devices.

           

           

           

      • #2373184
        ek
        AskWoody Lounger

        My ISP blocks some ports (closed, not stealth) related to SMB and NetBIOS.  So GRC’s portscans always show those particular ports as closed but not stealth – despite my home firewall configured to stealth those ports.

         

      • #2373215
        Paul T
        AskWoody MVP

        Can you post the port numbers that are not stealth?

        cheers, Paul

        • #2373223
          dmt_3904
          AskWoody Plus

          Easier to say what IS stealth: 445, 135, 137-139. The rest are closed. Open: 443, 80, 21-23. All the rest closed.

      • #2373533
        Paul T
        AskWoody MVP

        443 and 80 are web server ports. You do not want them open.
        Are you sure it’s the router and not something else on your network?

        cheers, Paul

        • #2373559
          dmt_3904
          AskWoody Plus

          I don’t know. The IP address is what comes up on the test. I am not there now.  But it is a concern and my friend is not technical. : ( Thanks.  Donna

          • #2373657
            Paul T
            AskWoody MVP

            What router are they using?
            Is it set to use web admin via the manufacturers web site?
            Have they changed the admin password from the default?

            cheers, Paul

            • #2373733
              dmt_3904
              AskWoody Plus

              Linksys Velop mesh.   I logged in via web, not Linksys app. I think remote access would be off.  My Linksys had no explicit option for that, I believe it would be on if you created an online account.

              Yes, admin password for router was changed.

              Also to your prior question, I had looked at all online devices on the network to identify them. I didn’t check the ip addresses.  There were a couple devices  that were unknown,  I was able to identify the manufacturer with the MAC address – Espressif IoT devices and Delta electronics – I figured they were some IOT devices like maybe the access points for the router.

              Or the toaster : ) ha ha ha just kidding

              I will be going back there in a couple weeks and can check things again. Donna

      • #2373870
        Paul T
        AskWoody MVP

        All devices on the network will have the same IP address – the router IP address.

        On the router, turn UPnP off and see is that helps.

        cheers, Paul

        • #2373887
          dmt_3904
          AskWoody Plus

          All devices on the network will have the same IP address – the router IP address.

          oh yeah, right! UNPNP is off.  My first GRC test said it was off.  Then when I logged into the router, it showed it was on.  I turned it off and retested, but no change in the port test results.  These results are confusing to me, I don’t understand.  I’ll test again when I am back there.  Thanks for your suggestions.  Donna

    Viewing 5 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: Need help with GRC Port scan results

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.