Forum Discussion

kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Oct 26, 2021

Vulnerability scanner scan Virtual server found UDP 161 but there is no vip udp port 161?

Hi

 

As title,

I used ulnerability scanner to scan virtual server IP to found any open port (I have VIP port 443, 22, 80)

 

result is scanner found UDP port 161 is opened but there is no vip udp port 161 in configuration.

 

Why is UDP port 161 is found? is it by default that every virtual server is open/received port udp 161 too?

 

Thank you

application delivery
BIG-IP
LTM
scanner
security
snmp
vulnerability
  • aaperson's avatar
    aaperson
    Icon for Cirrus rankCirrus
    Oct 29, 2021

    It is likely that you have SNMP port 161 configured on your device. Check under System,>SNMP>Agent or System>SNMP>Traps.

  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Oct 26, 2021

    Hi ,

     

    are you sure 161/UDP was detected on the IP address of a virtual server? The BIG-IP will not answer on port 161/UPD as long as there is not a listener defined. 

    What I think is more likely, is that it was detected on a self IP address. Take a look at K17333, this will explain why a self IP address might be listening on 161/UDP.

     

    KR

    Daniel