NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

krisdev25's avatar
Dec 15, 2020

Why is port TCP 40206 port open on Nighthawk M1 MR100

I was running a portscan on the Nighthawk M1 4G LTE Mobile Router (MR1100) and got the following output:

Starting Nmap 7.80 ( https://nmap.org ) at 2020-12-15 09:03 CST
Stats: 0:02:04 elapsed; 0 hosts completed (1 up), 1 undergoing Connect Scan
Connect Scan Timing: About 84.89% done; ETC: 09:05 (0:00:22 remaining)
Nmap scan report for attwifimanager.routerlogin.net (192.168.1.1)
Host is up (0.0038s latency).
Not shown: 49996 closed ports
PORT      STATE SERVICE
53/tcp    open  domain
80/tcp    open  http
5510/tcp  open  secureidprop
40206/tcp open  unknown

Nmap done: 1 IP address (1 host up) scanned in 164.35 seconds

There are 4 ports open: (1) TCP 53 is for DNS, (2) TCP 80 is for Web UI, (3) TCP 5510 is for Telnet AT commands, & (4) TCP 40206?

What is TCP Port 40206 used for?



1 Reply

  • krisdev25 That random looking port maps to the UPNP service.  You can disable by logging into the hotspot, go to Settings then Advanced Settings then Other.  Uncheck UPNP.  Device will reboot, then re-run the nmap test to confirm the port is now closed.