11

I'm seeing some unexpected ports open on an LG TV model 47LN5750-UH, serial 311MXTC1E969. Below is the result from a nmap scan.

Nmap scan report for 172.16.4.4
Host is up (0.00021s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
1148/tcp open  elfiq-repl
8080/tcp open  http-proxy
MAC Address: CC:2D:8C:59:9B:3C (LG Electronics)

I can't find information on LG TV TCP ports. I also cannot find useful information on TCP/1148 - Elfiq Replication Service. I did find some talk about TCP/1148 being part of a botnet.

My questions are:

  • What ports do LG TVs open
  • What are the services associated with those ports

And specific to the tv above:

  • Is TCP/1148 expected to be open?
  • What service is provided on the port?
Improve this question
5
  • 3
    As per IANA its the "Elfiq Replication Service". But I could not find any reference to this service. May be you can use this info further. Can't tell if that port should be really open.
    – sob
    Commented Jun 21, 2017 at 3:11
  • 3
    Have you tried Wireshark ?
    – Mawg
    Commented Jun 21, 2017 at 7:59
  • 1
    @sob - Forgive my ignorance... Are you stating that the tv opens TCP/1148 for the Elfiq Replication Service? Or are you guessing the service based on the port number? Can you provide a reference or citation? (I was able to find lots of hits for the known service name, but they most mostly useless references. If you are stating it as fact, then my next question is, what is the Elfiq Replication Service. I can't seem to find information on it, either).
    – jww
    Commented Jun 21, 2017 at 20:07
  • 4
    Re: using Wireshark to investigate...Run Wireshark as admin in promiscuous mode on a computer connected to the same subnet as your TV, and use the filters to only display packets with the LG TV's IP as the source or destination address.
    – GroundRat
    Commented Jun 21, 2017 at 20:27
  • 1
    Port 3001 works for my LG LB650V smart WebOS TV.
    – Zubi
    Commented Feb 24, 2018 at 9:02

1 Answer 1

Reset to default
6

I found this list:

Port Scanning host results

Open TCP Port:     1061
Open TCP Port:     1424
Open TCP Port:     1900 ssdp
Open TCP Port:     1970
Open TCP Port:     3000 ws
Open TCP Port:     3001 wss
Open TCP Port:     9955
Open TCP Port:     9998
Open TCP Port:     18181
Open TCP Port:     36866

 UDP:

 Sends data to 
 239.255.255.250:1900 ssdp traffic

192.168.1.255:9956 and 224.0.0.113:9956. Port 9956 and the contents show this is alljoyn-traffic,--

Source:
https://www.npmjs.com/package/lgtv

Improve this answer
2
  • For anyone else here wondering how this was retrieved (on macOS) open the Network Utility app and open the Port Scan tab, then enter the TV's IP address and hit scan
    – Dane Jordan
    Commented Jul 22, 2019 at 18:49
  • also i have seen LG TV spit out 56700/udp IPv4 broadcast in attempt to get ahold of a LifX lightbulb protocol server (typically Amazon Echo, Google Home).
    – John Greene
    Commented Nov 1, 2021 at 12:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.