Author Topic: What is http://192.168.1.1:5000/Public_UPNP_C3?  (Read 4216 times)

Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
What is http://192.168.1.1:5000/Public_UPNP_C3?
« on: August 22, 2012, 01:21:46 AM »
I see blue, clean spikes in my network shield for http://192.168.1.1:5000/Public_UPNP_C3.

I was wondering, what is this?

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69213
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #1 on: August 22, 2012, 02:29:32 AM »
That is a local IP address and probably to your router.

A search on your question returns many hits, http://uk.search.yahoo.com/search?p=http%3A%2F%2F192.168.1.1%3A5000%2FPublic_UPNP_C3

Also on just the Public_UPNP_C3 bit http://uk.search.yahoo.com/search?p=Public_UPNP_C3
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #2 on: August 22, 2012, 02:38:17 AM »
so nothing to worry about then?

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69213
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #3 on: August 22, 2012, 02:55:30 AM »
I didn't say that, which is why I went searching as this isn't an area I'm familiar with, I just know that is a local IP address and either another network device or computer on the network. I don't know why it might be happening.

So the searches are to give you some home work to see if any of those might match your system

Also info on port 5000 http://www.grc.com/port_5000.htm.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #4 on: August 22, 2012, 03:42:27 AM »
It shows up every once in a while but not always. I feel like it might be the new router. I didn't have it before.

(I did have http://192.168.1.1:5678/WANIPConnection but essexboy said those are normal)

(also, the links you put in your most recent post has to do with Win XP, I am running Win 7)
« Last Edit: August 22, 2012, 03:44:02 AM by leftisthominid »

Offline mchain

  • avast! Evangelist
  • Super Poster
  • ***
  • Posts: 2176
  • Gender: Male
  • Spartan Warriors
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #5 on: August 22, 2012, 04:48:17 AM »
Reason why stating what the OS is, is because it may be relevant to getting a correct answer; one difference between XP and Win7 is that XP does not natively support IPv6 protocol.  Is what you are seeing is on IPv6/IPv4?  IPv6 is still new, so...
XP Pro SP3 P4 3.2 HT 2GB RAM AIS v 2014.9.0.2011 Secunia PSI version 2.0.0.3003 TREND Micro RUBotted Beta Javacool SpywareBlaster version 5.0 Sandboxie v. 4.09 32-bit WOT (Web Of Trust) Browser reputation-based add-on http://www.mywot.com/   New: avast! listing of vendor uninstall tools:  http://www.avast.com/faq.php?article=AVKB11#artTitle
W7 Home Premium 64-bit SP1, 2.8 Pentium D, 3 GB RAM AIS v 2014.9.0.2016 (running same programs as above) Sandboxie 4.09 64-bit

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69213
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #6 on: August 22, 2012, 12:49:43 PM »
It shows up every once in a while but not always. I feel like it might be the new router. I didn't have it before.

(I did have http://192.168.1.1:5678/WANIPConnection but essexboy said those are normal)

(also, the links you put in your most recent post has to do with Win XP, I am running Win 7)

The link is about the port number, it happens to mention XP in regard to being able to disable the UPNP in XP (if not required). The information on the port and its use is old but is essentially the same for whatever OS.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #7 on: August 22, 2012, 03:11:09 PM »
I talked to essexboy about it. He said it is just my computer looking for other UPNP computers on the network.

I disabled UPNP on my router at home. When I am back home tonight, I'll check if this thing comes up anymore.

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69213
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #8 on: August 22, 2012, 03:43:26 PM »
Under normal circumstances (a long time ago) I would have suggested disabling the UPNP service as it was little used, but nowadays it is used more frequently as the internet can share devices. For me one of the biggest issues is in the name and most people seem to thing it has something to do with the regular PNP (Plug and Play) function, but it doesn't.

Some P2P apps might use this service.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline polonus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 20137
  • Gender: Male
  • malware fighter
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #9 on: August 22, 2012, 03:50:06 PM »
Hi DavidR,

Services you do not need, better turn off. You can always turn them back on when need be. Best policy i.m.h.o.
Read why here: http://www.grc.com/unpnp/unpnp.htm
Well, the tiny little tool for turnin' it on/off download from  here: http://www.grc.com/files/unpnp.exe
File MD5: dab14ab84b651318a5f7cd8c7db991a4 (packed with /unpnp.exe packed by UPX, FLY-CODE &  BINARYRES),

Enjoy,

polonus
« Last Edit: August 22, 2012, 03:51:39 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69213
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #10 on: August 22, 2012, 03:57:09 PM »
I'm afraid that the grc site hasn't been update in many areas for some time "Page last modified: Mar 03, 2008 at 10:49". Hence the reference I gave about port 5000 still mentioning XP.

As I mentioned disabling it can have unforeseen consequences.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline polonus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 20137
  • Gender: Male
  • malware fighter
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #11 on: August 22, 2012, 04:13:49 PM »
Hi DavidR,

Agree with you in modern times things have changed. If you have to plug and play devices, you better have it on (peripherals). The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components. UPnP achieves this by defining and publishing UPnP device control protocols (DCP) built upon open, Internet-based communication standards (port-forwarding). If you have Media Servers you are ill adviced to turn it off, because with closing down UPnP you would not like other services to be closed. I can imagine it could help towards router security in some sense,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #12 on: August 22, 2012, 04:42:57 PM »
For Win 7, I've already disabled UPNP it seems since I've disabled network discovery (http://windows.microsoft.com/en-SG/windows-vista/Enable-or-disable-network-discovery)

I've disabled UPNP on my router.

From what I understand, I should be safe now?


Offline leftisthominid

  • Sr. Member
  • ****
  • Posts: 224
    • Personal Message (Offline)
Re: What is http://192.168.1.1:5000/Public_UPNP_C3?
« Reply #13 on: August 23, 2012, 04:09:00 AM »
I have not seen any 192.168.1.1 spikes, so I think this issue is solved!

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now