Port reference
Port 8554 (TCP) – RTSP alternate (streaming)
Common alternate port for RTSP streaming used by IP cameras, media servers, and software like live555 when 554 is unavailable.
Quick facts
- Transport
- tcp
- Category
- Registered
- Risk level
- High
Frequently targeted — restrict exposure and harden it.
Default state
Open on IP cameras, NVRs, and streaming servers configured to use an alternate RTSP port; sometimes exposed to the internet.
What is port 8554 used for?
Port 8554 is a common alternate RTSP port. It runs the same Real Time Streaming Protocol as port 554, used by IP cameras, NVRs, and media servers — including the popular live555 stack and tools like VLC and FFmpeg — when 554 is unavailable or a second stream is needed. RTSP carries the control channel (DESCRIBE, PLAY, PAUSE) while the video itself flows over RTP.
When would you open it?
Open or forward 8554 when you run a streaming server or camera on it and need to view feeds from another device. Because video streams are sensitive, most people reach them over a VPN or a private network rather than forwarding the port to the internet.
Is it safe to open?
Many cameras ship with weak or no authentication, so an exposed RTSP port can let strangers watch your feed; require credentials and keep it off the public internet. See the security notes below.
How to check if this port is open
ss -tulpn | grep :8554
nmap -p 8554 <target>netstat -ano | findstr :8554
Test-NetConnection <host> -Port 8554lsof -i :8554
nmap -p 8554 <target>How to open this port on your router
To reach this service from outside your network, forward the port on your router:
- Open your router's admin page (usually http://192.168.1.1 or http://192.168.0.1) and sign in.
- Find the "Port Forwarding" section — it may be called NAT, Virtual Server, or Applications & Gaming.
- Add a rule forwarding external port 8554 to your device's local IP, internal port 8554, protocol TCP.
- Save and reboot the router if prompted, then test the port from outside your network.
Only forward ports you understand — it exposes that device to the public internet. For remote admin access, a VPN is safer than forwarding the port.
Allow this port through the firewall
sudo ufw allow 8554/tcpsudo firewall-cmd --permanent --add-port=8554/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 8554 -j ACCEPTNew-NetFirewallRule -DisplayName "Allow 8554" -Direction Inbound -Protocol TCP -LocalPort 8554 -Action AllowSecurity & risks
Common attacks
- Accessing live camera/media feeds with no or default authentication
- Stream URL/path brute forcing to find unprotected feeds
- Credential brute force against camera and server accounts
- Mass scanning and indexing of exposed RTSP streams
Hardening
- Require authentication and change all default credentials
- Never expose RTSP to the internet; use an isolated VLAN
- Access feeds through a VPN or secured gateway
- Patch camera/server firmware and disable unused RTSP endpoints
- Treat 8554 with the same controls as standard RTSP 554
How to block this port
sudo ufw deny 8554/tcpsudo firewall-cmd --permanent --remove-port=8554/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 8554 -j DROPNew-NetFirewallRule -DisplayName "Block 8554" -Direction Inbound -Protocol TCP -LocalPort 8554 -Action Blocknmap snippet
nmap -p8554 --script rtsp-methods,rtsp-url-brute <target>Replace <target> with the host or range you're authorized to scan.
Related ports
Frequently asked questions
- How does port 8554 differ from RTSP port 554?
- It is the same protocol, just on an alternate port. Servers like live555 and many IP cameras use 8554 when 554 is taken or to run a second instance. The same risks and hardening as standard RTSP apply.
- Why are RTSP streams on 8554 a security risk?
- Like 554, many devices expose RTSP with default or no credentials, letting anyone open the live feed. Using an alternate port does not provide security — authentication and network isolation do.