Home Hub 4000 port 22 is open !

[Felice]

Hello, I run a port scanner daily. Few days ago my scanner reported a new port open on my Home Hub 4000 router public IP, ssh port 22. It looks like Bell enabled sshd service on my router remotely without my knowledge and consent. Called support but was waste of time, never received call back from next level tech. Anyone know how to disable sshd on this router or block this port ? It's a vulnerability. 

[Zadigre]

I used https://www.shodan.io/ to see if this website had anything on my ip address. 

I also connected to port 22 from my work network (non bell internet connection)

[Vanadiel]

So if you use this it shows port 22 open?

[Zadigre]

yes this is shown as opened on this website too.

[Vanadiel]

Interesting. Must the the USB file sharing service that is using that port.

[Zadigre]

euh no... 

this is public facing ssh port. I guess bell is using it to remotely manage the equipement... but this doesn't make sense considering it's opened to everyone. they should limit connection to their own internal network. 

[Vanadiel]

What happens when you log into it?

[Zadigre]

Prompt asking for a password. Problem is..: it’s using a old version dating back to 2020. I don’t trust bell with the security of this device 

[kevincox]

This seems to have gotten worse. As of last night hairpin access is now also affected. So whereas before inside of my network I could access port 22 of my WAN IP and it was only intercepted from outside, now it is intercepted both inside and out.

[kevincox]

Nevermind, I forgot that I turned on my VPN...

[kevincox]

This isn't resolved...