Port 554 (RTSP)

Real Time Streaming Protocol, used by IP cameras, NVRs and DVRs to stream video.

Well-known (system) port, 0-1023 TCPUDP Streaming Do not expose to the internet

What port 554 is used for

Real Time Streaming Protocol, used by IP cameras, NVRs and DVRs to stream video.

Security: should port 554 be open?

Do not expose to the internet. Thousands of cameras expose RTSP with default or no credentials, letting anyone watch the feed. Keep cameras on an isolated network and reach them through a VPN.

IANA assignment

Service nameProtoDescriptionAssigneeReference

rtsp TCP Real Time Streaming Protocol (RTSP) Rob Lanphier -

rtsp UDP Real Time Streaming Protocol (RTSP) Rob Lanphier -

Check what is listening on port 554

Linux: is anything listening on TCP 554?

sudo ss -tlnp 'sport = :554'

Linux: UDP 554

sudo ss -ulnp 'sport = :554'

Linux / macOS: which process owns the port

sudo lsof -nP -i :554

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':554 '

Windows (Command Prompt)

netstat -ano | findstr :554

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 554 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine

nc -vz -w 5 HOST 554

From Windows

Test-NetConnection HOST -Port 554

UDP probe (no reply does not prove it is closed)

nc -vzu -w 5 HOST 554

Block port 554 in the firewall

ufw

sudo ufw deny 554/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 554 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 554 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 554' -Direction Inbound -Protocol TCP -LocalPort 554 -Action Block

ufw

sudo ufw deny 554/udp