8

I'm seeing some unexpected ports open on an LG TV model 47LN5750-UH, serial 311MXTC1E969. Below is the result from a nmap scan.

Nmap scan report for 172.16.4.4
Host is up (0.00021s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
1148/tcp open  elfiq-repl
8080/tcp open  http-proxy
MAC Address: CC:2D:8C:59:9B:3C (LG Electronics)

I can't find information on LG TV TCP ports. I also cannot find useful information on TCP/1148 - Elfiq Replication Service. I did find some talk about TCP/1148 being part of a botnet.

My questions are:

  • What ports do LG TVs open
  • What are the services associated with those ports

And specific to the tv above:

  • Is TCP/1148 expected to be open?
  • What service is provided on the port?
  • 3
    As per IANA its the "Elfiq Replication Service". But I could not find any reference to this service. May be you can use this info further. Can't tell if that port should be really open. – sob Jun 21 '17 at 3:11
  • 3
    Have you tried Wireshark ? – Mawg says reinstate Monica Jun 21 '17 at 7:59
  • 1
    @sob - Forgive my ignorance... Are you stating that the tv opens TCP/1148 for the Elfiq Replication Service? Or are you guessing the service based on the port number? Can you provide a reference or citation? (I was able to find lots of hits for the known service name, but they most mostly useless references. If you are stating it as fact, then my next question is, what is the Elfiq Replication Service. I can't seem to find information on it, either). – jww Jun 21 '17 at 20:07
  • 4
    Re: using Wireshark to investigate...Run Wireshark as admin in promiscuous mode on a computer connected to the same subnet as your TV, and use the filters to only display packets with the LG TV's IP as the source or destination address. – GroundRat Jun 21 '17 at 20:27
  • 1
    Port 3001 works for my LG LB650V smart WebOS TV. – Zubi Feb 24 '18 at 9:02
5

I found this list:

Port Scanning host results

Open TCP Port:     1061
Open TCP Port:     1424
Open TCP Port:     1900 ssdp
Open TCP Port:     1970
Open TCP Port:     3000 ws
Open TCP Port:     3001 wss
Open TCP Port:     9955
Open TCP Port:     9998
Open TCP Port:     18181
Open TCP Port:     36866

 UDP:

 Sends data to 
 239.255.255.250:1900 ssdp traffic

192.168.1.255:9956 and 224.0.0.113:9956. Port 9956 and the contents show this is alljoyn-traffic,--

Source:
https://www.npmjs.com/package/lgtv

| improve this answer | |
  • 1
    Thanks Mico. Are those ports expected? What services are they running? Also, myself (and probably others) would be interested in learning UDP ports that are expected to be open, and information other services a little lower in the stack. – jww Jun 30 '17 at 21:45
  • 1
    See edit @jww.. – mico Jul 1 '17 at 16:29
  • For anyone else here wondering how this was retrieved (on macOS) open the Network Utility app and open the Port Scan tab, then enter the TV's IP address and hit scan – Dane Jordan Jul 22 '19 at 18:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.