Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: leftisthominid on August 22, 2012, 03:21:46 AM

Title: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 22, 2012, 03:21:46 AM
I see blue, clean spikes in my network shield for http://192.168.1.1:5000/Public_UPNP_C3.

I was wondering, what is this?
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: DavidR on August 22, 2012, 04:29:32 AM
That is a local IP address and probably to your router.

A search on your question returns many hits, http://uk.search.yahoo.com/search?p=http%3A%2F%2F192.168.1.1%3A5000%2FPublic_UPNP_C3 (http://uk.search.yahoo.com/search?p=http%3A%2F%2F192.168.1.1%3A5000%2FPublic_UPNP_C3)

Also on just the Public_UPNP_C3 bit http://uk.search.yahoo.com/search?p=Public_UPNP_C3 (http://uk.search.yahoo.com/search?p=Public_UPNP_C3)
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 22, 2012, 04:38:17 AM
so nothing to worry about then?
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: DavidR on August 22, 2012, 04:55:30 AM
I didn't say that, which is why I went searching as this isn't an area I'm familiar with, I just know that is a local IP address and either another network device or computer on the network. I don't know why it might be happening.

So the searches are to give you some home work to see if any of those might match your system

Also info on port 5000 http://www.grc.com/port_5000.htm (http://www.grc.com/port_5000.htm).
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 22, 2012, 05:42:27 AM
It shows up every once in a while but not always. I feel like it might be the new router. I didn't have it before.

(I did have http://192.168.1.1:5678/WANIPConnection but essexboy said those are normal)

(also, the links you put in your most recent post has to do with Win XP, I am running Win 7)
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: mchain on August 22, 2012, 06:48:17 AM
Reason why stating what the OS is, is because it may be relevant to getting a correct answer; one difference between XP and Win7 is that XP does not natively support IPv6 protocol.  Is what you are seeing is on IPv6/IPv4?  IPv6 is still new, so...
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: DavidR on August 22, 2012, 02:49:43 PM
It shows up every once in a while but not always. I feel like it might be the new router. I didn't have it before.

(I did have http://192.168.1.1:5678/WANIPConnection but essexboy said those are normal)

(also, the links you put in your most recent post has to do with Win XP, I am running Win 7)

The link is about the port number, it happens to mention XP in regard to being able to disable the UPNP in XP (if not required). The information on the port and its use is old but is essentially the same for whatever OS.
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 22, 2012, 05:11:09 PM
I talked to essexboy about it. He said it is just my computer looking for other UPNP computers on the network.

I disabled UPNP on my router at home. When I am back home tonight, I'll check if this thing comes up anymore.
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: DavidR on August 22, 2012, 05:43:26 PM
Under normal circumstances (a long time ago) I would have suggested disabling the UPNP service as it was little used, but nowadays it is used more frequently as the internet can share devices. For me one of the biggest issues is in the name and most people seem to thing it has something to do with the regular PNP (Plug and Play) function, but it doesn't.

Some P2P apps might use this service.
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: polonus on August 22, 2012, 05:50:06 PM
Hi DavidR,

Services you do not need, better turn off. You can always turn them back on when need be. Best policy i.m.h.o.
Read why here: http://www.grc.com/unpnp/unpnp.htm
Well, the tiny little tool for turnin' it on/off download from  here: http://www.grc.com/files/unpnp.exe
File MD5: dab14ab84b651318a5f7cd8c7db991a4 (packed with /unpnp.exe packed by UPX, FLY-CODE &  BINARYRES),

Enjoy,

polonus
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: DavidR on August 22, 2012, 05:57:09 PM
I'm afraid that the grc site hasn't been update in many areas for some time "Page last modified: Mar 03, 2008 at 10:49". Hence the reference I gave about port 5000 still mentioning XP.

As I mentioned disabling it can have unforeseen consequences.
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: polonus on August 22, 2012, 06:13:49 PM
Hi DavidR,

Agree with you in modern times things have changed. If you have to plug and play devices, you better have it on (peripherals). The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components. UPnP achieves this by defining and publishing UPnP device control protocols (DCP) built upon open, Internet-based communication standards (port-forwarding). If you have Media Servers you are ill adviced to turn it off, because with closing down UPnP you would not like other services to be closed. I can imagine it could help towards router security in some sense,

polonus
Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 22, 2012, 06:42:57 PM
For Win 7, I've already disabled UPNP it seems since I've disabled network discovery (http://windows.microsoft.com/en-SG/windows-vista/Enable-or-disable-network-discovery)

I've disabled UPNP on my router.

From what I understand, I should be safe now?

Title: Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
Post by: leftisthominid on August 23, 2012, 06:09:00 AM
I have not seen any 192.168.1.1 spikes, so I think this issue is solved!