Firewall ports - 3 missing from your sites list - what are they for, one going to Korea?

Cameras
1

Hello,

I run a tight ship when it comes to firewall rules and devices on my network for as we know IoT devices are not generally very secure and do things they should not…

Finding the Wyze guide for ports used,

There are 3 ports missing that I see on my firewall, which are blocked:

Traffic going to:
Amazon:
52.35.221.113:8883 TCP:S
3.215.216.203:10240 UDP

FDCservers
50.7.99.83:10240 UDP

This one makes me wonder, going to Korea?

person: IP Manager
address: Seoul Gangseo-gu Magokjungang 8-ro 71
address: LG Science Park LGCNS
country: KR
phone: +82-2-2099-5893
e-mail: netinfo@lgcns.com
nic-hdl: KS1141-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr
source: KRNIC-

203.247.157.116:47005 TCP:S

What are these other 3 ports and what are they used for?

6 Likes
2

So found out 8883 is used for online / offline status of your camera, if this port is blocked your Camera’s will show as offline in the app.

Now for the other ports please?

3 Likes
3

It is sad that after 4 years Wyze still hasn’t cared enough to answer your question. I had a ton of connections going to port 100001 in all kinds of strange places in different countries. It is supposed to be for local live P2P streaming. I blocked that port and found that I can view my cameras if I’m on my network with it blocked, but, if I am at another location, I cannot. This makes sense. What I don’t understand is why there were connections going all over the place. I can only assume that that Wyze’s network isn’t trustworthy and people were viewing my cameras all over the world. A few other ports I see in use are 8080, 8000, and 21047. The cameras work good, but, I don’t trust them at all from a security standpoint.

1 Like
4

@jemiller,

It’s Wikipedia but is a good read and sited.

Screenshot_20241103_084008_Edge
Screenshot_20241103_084008_Edge1440×3200 235 KB

I don’t for a minute think Wyze is allowing your cameras to stream to the internet unobstructed.

I would be more worried if you had any ports open inbound, unless your port forwarding. As I’ve posted before:

grc.com and a test named “shields up” is one of the best tests in my toolbox. Your goal is for your home network to be in “stealth mode”.

1 Like
5

Never show sensitive information.

My cam views can be seen by anyone walking by the house.

2 Likes