Having a port open in router, does it make it unsafe?

VinylxScratches

Golden Member
Feb 2, 2009
1,666
0
0
I have one port open on my router so I can RDP into my desktop computer when I'm not at home.

I check my log and I see this.

Source IP Destination Port Number
190.148.66.17 33629
99.52.185.253 62874
70.244.60.235 9215
99.13.23.71 33629
67.242.55.229 62874
58.147.79.132 3389
67.161.37.45 33629
67.194.144.22 62874
77.207.45.101 9215
75.251.145.252 9215
67.164.136.132 33629
70.239.151.37 9215
67.176.97.181 33629
78.137.50.157 9215
67.182.173.81 62874
67.171.159.4 33629

I noticed that someone from 58.147.79.132 used port 3389. This is what port is open on my router. Should I be concerned?
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Forwarding ports is always a reason for concern, and can always make your setup "less safe" (I'd argue that it's always unsafe ;)). Unfortunately, your logs are incomplete and there's no way to tell whether they successfully authenticated to your machine or not.
 

VinylxScratches

Golden Member
Feb 2, 2009
1,666
0
0
Ah, well is there anything they can do if my PC is off? I have policies setup if they attempt to login on my machine to lock the account.
 

RebateMonger

Elite Member
Dec 24, 2005
11,586
0
0
Any time there are open ports there'll be attempts (mostly automated) to access whatever's running on that port. For RDP, as long as you have a hard-to-break password on the PC offering RDP, you should be fine. Be especially concerned whether your Local Administrator account has a strong password, since that's usually the account that'll be attacked.
 

Chiefcrowe

Diamond Member
Sep 15, 2008
5,055
198
116
if your computer is actually off then you're fine.

Originally posted by: VinylxScratches
Ah, well is there anything they can do if my PC is off? I have policies setup if they attempt to login on my machine to lock the account.