Ports 554, 7070 ?? (and 4567)

[#1]

Hi,

I have nmap scanned my network, and it finds open ports:

554 rtsp
7070 realserver
4567 TR-069

I underrstand 4567 is to allow hardware updates from PN (my routerd last update was in 2021, PN kindly sent me through a new Hub, which I will install tomorrow).

The next two ports I am not sure if these are the router, or some other device behind the router (of which there are  few).

7070 RealServer ?? this from what I can see is an SQL server.

And

554 rtsp - this is reported as a 'Streaming protocol', commonly used by CCTV

Could anyone explain if the 7070 and 554 are Plus Net Router ports left open - such as the 4567 ? and can they be closed.

Any thoughts appreciated.

[#2]

https://hackerific.net/2016/03/20/false-positive-tcp-ports/

[#3]

Thanks, very helpful, I will use the methods in the post to scan my network, so maybe they are falsly reported, and/or are being picked up along the way.

[#4]

@1R27cD5n 

I do not see those posts open on the Hub two I use using https://www.ipvoid.com/port-scan/ 

The ports you mentioned are all 'filtered'

[#5]

Thanks, but I wasn't sure of the results when I used that Tool on my IP, I presume as its a web service it can be used from the browser within your network, to look in, so to speak.

When I scan a specific port (554 and 7070) and All Ports, I am not sure how to interpret the results, the All Ports scan - simply lists all the popular ports, a long list, those are not open on my network for sure.

Maybe I am using it incorrectly, any tips ?

I will Nmap scan my network using the above posted switches and methods, when at another location today.

[#6]

I would expect using the link I provided it will be testing your Hub from a foreign network.

As you are aware it is important to check for open ports from outside your private network using your current public IP Address

[#7]

Yes I will test it from outside with Nmap later today.

Using GRCs Sheilds Up:
https://www.grc.com/x/ne.dll?rh1dkyd2

It reports all is in order and as expected, ie 554 and 7070 closed.

Using Sheilds up I have been able to scan the following ports 1-1026:

443 open

554 Stealth

and specific ports above 1026:

4567 Open

7070 Stealth

... and it reports 443 as open, which is HTTPS for an IOT server I have.
and ...
554 and 7070 as 'Stealth', ie closed.
4567 is open, but I understand this is/was used by PN to update firmware on the router.

Will ee what my more detailed Nmap scans pick up later today.