TCP 554
Synopsis
- TCP port 554 is the default control port for RTSP (Real Time Streaming Protocol).
- Media servers that use it include Apple QuickTime/QuickTime Streaming Server and Darwin Streaming Server, RealNetworks Helix/RealServer, Wowza Streaming Engine, and VLC’s RTSP server.
- The Live555 Media Server (and many products built on the live555 library) listens on 554 for RTSP.
- IP cameras and NVRs commonly expose RTSP on 554—examples include Axis, Hikvision, Dahua, Vivotek, Foscam, Reolink, and Ubiquiti UniFi Protect cameras.
- Windows Media Services on Windows Server supports RTSP streaming over TCP 554.
- Many ONVIF-compatible surveillance devices publish their media via RTSP URLs that default to port 554.
- Port 554 is frequently targeted by attackers who scan for exposed RTSP streams on cameras/NVRs and exploit default/weak credentials or bugs (e.g., Hikvision RTSP authentication bypass CVE-2017-7921) to view live video.
Observed activity
Last 30 days
Detailed chart