I'm seeing some unexpected ports open on an LG TV model 47LN5750-UH, serial 311MXTC1E969. Below is the result from a nmap scan.

Nmap scan report for
Host is up (0.00021s latency).
Not shown: 998 closed ports
1148/tcp open  elfiq-repl
8080/tcp open  http-proxy
MAC Address: CC:2D:8C:59:9B:3C (LG Electronics)

I can't find information on LG TV TCP ports. I also cannot find useful information on TCP/1148 - Elfiq Replication Service. I did find some talk about TCP/1148 being part of a botnet.

My questions are:

  • What ports do LG TVs open
  • What are the services associated with those ports

And specific to the tv above:

  • Is TCP/1148 expected to be open?
  • What service is provided on the port?
  • 3
    As per IANA its the "Elfiq Replication Service". But I could not find any reference to this service. May be you can use this info further. Can't tell if that port should be really open.
    – sob
    Jun 21, 2017 at 3:11
  • 3
    Have you tried Wireshark ? Jun 21, 2017 at 7:59
  • 1
    @sob - Forgive my ignorance... Are you stating that the tv opens TCP/1148 for the Elfiq Replication Service? Or are you guessing the service based on the port number? Can you provide a reference or citation? (I was able to find lots of hits for the known service name, but they most mostly useless references. If you are stating it as fact, then my next question is, what is the Elfiq Replication Service. I can't seem to find information on it, either).
    – jww
    Jun 21, 2017 at 20:07
  • 4
    Re: using Wireshark to investigate...Run Wireshark as admin in promiscuous mode on a computer connected to the same subnet as your TV, and use the filters to only display packets with the LG TV's IP as the source or destination address.
    – GroundRat
    Jun 21, 2017 at 20:27
  • 1
    Port 3001 works for my LG LB650V smart WebOS TV.
    – Zubi
    Feb 24, 2018 at 9:02

1 Answer 1


I found this list:

Port Scanning host results

Open TCP Port:     1061
Open TCP Port:     1424
Open TCP Port:     1900 ssdp
Open TCP Port:     1970
Open TCP Port:     3000 ws
Open TCP Port:     3001 wss
Open TCP Port:     9955
Open TCP Port:     9998
Open TCP Port:     18181
Open TCP Port:     36866


 Sends data to ssdp traffic and Port 9956 and the contents show this is alljoyn-traffic,--


  • 2
    Thanks Mico. Are those ports expected? What services are they running? Also, myself (and probably others) would be interested in learning UDP ports that are expected to be open, and information other services a little lower in the stack.
    – jww
    Jun 30, 2017 at 21:45
  • 1
    See edit @jww..
    – mico
    Jul 1, 2017 at 16:29
  • For anyone else here wondering how this was retrieved (on macOS) open the Network Utility app and open the Port Scan tab, then enter the TV's IP address and hit scan Jul 22, 2019 at 18:49
  • also i have seen LG TV spit out 56700/udp IPv4 broadcast in attempt to get ahold of a LifX lightbulb protocol server (typically Amazon Echo, Google Home). Nov 1, 2021 at 12:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.