11

I'm seeing some unexpected ports open on an LG TV model 47LN5750-UH, serial 311MXTC1E969. Below is the result from a nmap scan.

Nmap scan report for 172.16.4.4
Host is up (0.00021s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
1148/tcp open  elfiq-repl
8080/tcp open  http-proxy
MAC Address: CC:2D:8C:59:9B:3C (LG Electronics)

I can't find information on LG TV TCP ports. I also cannot find useful information on TCP/1148 - Elfiq Replication Service. I did find some talk about TCP/1148 being part of a botnet.

My questions are:

  • What ports do LG TVs open
  • What are the services associated with those ports

And specific to the tv above:

  • Is TCP/1148 expected to be open?
  • What service is provided on the port?
jww
  • 299
  • 1
  • 2
  • 11

1 Answers1

6

I found this list:

Port Scanning host results

Open TCP Port:     1061
Open TCP Port:     1424
Open TCP Port:     1900 ssdp
Open TCP Port:     1970
Open TCP Port:     3000 ws
Open TCP Port:     3001 wss
Open TCP Port:     9955
Open TCP Port:     9998
Open TCP Port:     18181
Open TCP Port:     36866

 UDP:

 Sends data to 
 239.255.255.250:1900 ssdp traffic

192.168.1.255:9956 and 224.0.0.113:9956. Port 9956 and the contents show this is alljoyn-traffic,--

Source:
https://www.npmjs.com/package/lgtv

anonymous2
  • 4,902
  • 3
  • 22
  • 49
mico
  • 4,351
  • 1
  • 18
  • 27