Ports 4567 and 6161 on Plusnet Hub One open

[#1]

When checking the Hub One for open ports I found 4567 and 6161 open.

I think it was mentioned before that port 4567 may be open for TR-069 purposes. Does anyone know what port 6161 is listening for?

[#2]

4567 is used for TR069/CWMP.

I'm not aware of port 6161 being open though, so suspect this is down to UPnP and another device on your local network.

[#3]

Interesting. Can someone with a Hub One please check if their router's port 6161 is open on this site? https://www.yougetsignal.com/tools/open-ports/

[#4]

6161 is open on my hub one. Can't be upnp.

[#5]

Open on mine as well.

[#6]

You can switch off TR069.

[#7]

---

@VileReynard wrote:

You can switch off TR069.

---

You can turn off "Automatic Hardware Setup" (TR-069) in the Plusnet control panel but port 4567 on the router will remain open.

[#8]

---

@bobpullen wrote:

I'm not aware of port 6161 being open though, so suspect this is down to UPnP and another device on your local network.

---

@bobpullen it would appear I'm not the only one with port 6161 open on the Hub One. Please can you find out what the router is listening on this port for?

[#9]

According to IANA (the port number registry) this is used for 'Patrol Internet Service Manager' does this mean anything to you?

[#10]

@pv wrote:

@VileReynard wrote:

You can switch off TR069.

You can turn off "Automatic Hardware Setup" (TR-069) in the Plusnet control panel but port 4567 on the router will remain open.

I would strongly suggest against this. Where the Hub One is concerned, it will probably send a SPV instruction to the router and overwrite your broadband username/password with the default values. There is then a continued chance that this will repeat itself every 24hrs when the router makes an inform.

@pv regarding the port 6161 observation, I've just jumped onto your router and it looks like it's related to the software framework embedded in the device that is used to underpin some of BT's diagnostic capability.

    (OR // Enabled remote admin services
      (AND // Remote telnet http
        IP_PROTO(TCP)
        (OR
          DST_PORT_RANGE(4567, 4567)
        )
      )
      (AND // BT SAAF
        IP_PROTO(TCP)
        DST_PORT_RANGE(6161, 6161)
      )
    )

I don't recall this being the case in the past mind you, so perhaps it's slipped in as part of the latest firmware deployment. I'll ask around.

In short: nothing to worry about.

[#11]

When I used to have Plusnet supplied routers (not Hub1) I always used to switch off TR069 with no visible effects.

These routers weren't preconfigured anyway.

[#12]

@VileReynard, different ACS platform, different behaviour.

[#13]

---

I don't recall this being the case in the past mind you, so perhaps it's slipped in as part of the latest firmware deployment. I'll ask around.

---

Thanks, so Plusnet is not using port 6161 for anything? In which case maybe it would be worth closing this port in a future firmware update.

[#14]

---

@bobpullen wrote:

I don't recall this being the case in the past mind you, so perhaps it's slipped in as part of the latest firmware deployment. I'll ask around.

---

Did a spot of testing earlier. Seems it's been the case for at least the last four firmware revisions.

@pv, agreed. If it's not in use - we'll close it.

[#15]

@pv, I've closed the port on your device so shout up if you notice any ill effects. We've requested this change is applied to the next firmware build that's deployed.