I see blue, clean spikes in my network shield for http://192.168.1.1:5000/Public_UPNP_C3.
I was wondering, what is this?
I see blue, clean spikes in my network shield for http://192.168.1.1:5000/Public_UPNP_C3.
I was wondering, what is this?
That is a local IP address and probably to your router.
A search on your question returns many hits, http://uk.search.yahoo.com/search?p=http%3A%2F%2F192.168.1.1%3A5000%2FPublic_UPNP_C3
Also on just the Public_UPNP_C3 bit http://uk.search.yahoo.com/search?p=Public_UPNP_C3
so nothing to worry about then?
I didn’t say that, which is why I went searching as this isn’t an area I’m familiar with, I just know that is a local IP address and either another network device or computer on the network. I don’t know why it might be happening.
So the searches are to give you some home work to see if any of those might match your system
Also info on port 5000 http://www.grc.com/port_5000.htm.
It shows up every once in a while but not always. I feel like it might be the new router. I didn’t have it before.
(I did have http://192.168.1.1:5678/WANIPConnection but essexboy said those are normal)
(also, the links you put in your most recent post has to do with Win XP, I am running Win 7)
Reason why stating what the OS is, is because it may be relevant to getting a correct answer; one difference between XP and Win7 is that XP does not natively support IPv6 protocol. Is what you are seeing is on IPv6/IPv4? IPv6 is still new, so…
The link is about the port number, it happens to mention XP in regard to being able to disable the UPNP in XP (if not required). The information on the port and its use is old but is essentially the same for whatever OS.
I talked to essexboy about it. He said it is just my computer looking for other UPNP computers on the network.
I disabled UPNP on my router at home. When I am back home tonight, I’ll check if this thing comes up anymore.
Under normal circumstances (a long time ago) I would have suggested disabling the UPNP service as it was little used, but nowadays it is used more frequently as the internet can share devices. For me one of the biggest issues is in the name and most people seem to thing it has something to do with the regular PNP (Plug and Play) function, but it doesn’t.
Some P2P apps might use this service.
Hi DavidR,
Services you do not need, better turn off. You can always turn them back on when need be. Best policy i.m.h.o.
Read why here: http://www.grc.com/unpnp/unpnp.htm
Well, the tiny little tool for turnin’ it on/off download from here: http://www.grc.com/files/unpnp.exe
File MD5: dab14ab84b651318a5f7cd8c7db991a4 (packed with /unpnp.exe packed by UPX, FLY-CODE & BINARYRES),
Enjoy,
polonus
I’m afraid that the grc site hasn’t been update in many areas for some time “Page last modified: Mar 03, 2008 at 10:49”. Hence the reference I gave about port 5000 still mentioning XP.
As I mentioned disabling it can have unforeseen consequences.
Hi DavidR,
Agree with you in modern times things have changed. If you have to plug and play devices, you better have it on (peripherals). The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components. UPnP achieves this by defining and publishing UPnP device control protocols (DCP) built upon open, Internet-based communication standards (port-forwarding). If you have Media Servers you are ill adviced to turn it off, because with closing down UPnP you would not like other services to be closed. I can imagine it could help towards router security in some sense,
polonus
For Win 7, I’ve already disabled UPNP it seems since I’ve disabled network discovery (http://windows.microsoft.com/en-SG/windows-vista/Enable-or-disable-network-discovery)
I’ve disabled UPNP on my router.
From what I understand, I should be safe now?
I have not seen any 192.168.1.1 spikes, so I think this issue is solved!