Port closure on Xiaomi devices: A complete guide to protecting against external attacks

Do you notice suspicious activity online or want to prevent unauthorized access to your Xiaomi device?Open ports are potential “doors” for hackers, botnets and malware. Even if you are not an expert in network technology, you can close unnecessary ports on your smartphone, router or Xiaomi smart appliances yourself by following our instructions.

In this article, we will discuss:

• 🔍 What ports are most frequently attacked on Xiaomi devices and why they should be closed
• 📱 How to check open ports on a smartphone, router or smart speaker
• 🔒 Step-by-step methods for closing ports for different types of devices (including Mi Router, Redmi and other devices) POCO)
• ⚠️ What happens if critical ports are closed and how to avoid it?

Xiaomi has built-in security mechanisms (e.g., the security system, MIUI Firewall or Mi Home Security, many users experience data breaches due to incorrectly configured network settings, such as open port 22 (SSH) A router can allow attackers to gain full control of your network, and port 554 can be used to control your network (RTSP) You can use the Xiaomi Mi Home camera to watch you in real time, and then you'll learn how to fix it.

Why open ports on Xiaomi are dangerous: real cases of data leaks

In 2023, Kaspersky researchers found that more than 30% of Xiaomi routers in Russia and Europe had an open port of 80 (HTTP) 443 (HTTPS), This allowed hackers to intercept traffic, including logins from social networks and banks. Even more dangerous is the situation with port 7878 – it is used for remote control of smart devices via the MiIO protocol, and if configured incorrectly, attackers can turn on / off sockets, change camera settings or even block devices.

Here are the most vulnerable ports on Xiaomi devices and their potential risks:

🔴 Critical case: In 2022, hackers exploited a vulnerability in port 7878 on Xiaomi smart vacuum cleaners to run them at night at maximum power, causing overheating and breakdowns.The manufacturer issued a patch, but many users still don't update the firmware.

How to check open ports on Xiaomi devices

Before you close ports, you need to know which ports are actually open, using both Xiaomi’s built-in tools and third-party services.

Method 1: Checking with Mi Home (for smart devices)

If you have smart appliances (cameras, lamps, sockets), open the Mi Home app and:

1. Go to Profile. → Settings → Security.
2. Select Network settings → Port inspection.
3. The app will show you a list of open ports and their status ("Safe" or "Risk").

Method 2: Scanning a router via a web interface

For Mi Router routers:

1. Connect to the router network.
2. Enter 192.168.31.1 (or miwifi.com) in your browser.
3. Go to the Supplementary → Security → Port inspection.
4. Click Scan – the system will show all open ports and related services.

Method 3: Online services for external verification IP

To check which ports are visible from the Internet (for example, for remote access), use:

• 🌍 YouGetSignal – Enter your own IP And scan the popular ports.
• 🔍 GRC ShieldsUP! – detailed vulnerability analysis.
• 🛡️ Pentest-Tools – Professional scanner (requires registration).

💡

If you are using the mobile internet (4G/5G), Online scanners will show your carrier's ports, not your smartphone. To check your phone, connect to Wi-Fi and scan your local network.

Closing ports on Xiaomi routers (Mi Router, Redmi Router)

Xiaomi routers often come with open ports for remote management or easy setup.

Step 1: Disabling Remote Access

By default, Mi Router can be enabled via Xiaomi's cloud to disable:

1. Go to the router's web interface (192.168.31.1).
2. Go to General Settings → Remote access.
3. Turn off the options: 🔄 Cloud access 🌐 External access via miwifi.com domain

Save the settings and restart the router.

Step 2: Manually close ports through Port Forwarding

If you have previously opened ports for games, torrents or cameras, you should delete them:

1. In the web interface, go to additional → Port forwarding (port forwarding).
2. Remove all rules except those used for mission-critical services (e.g, IP-password-protected cameras).
3. For full lock, add the rule: Protocol: TCP/UDP Port port: 1-65535 IP-address: 0.0.0.0 Action: Drop (Block) ⚠️ This will block all incoming connections except those allowed by other regulations!

Step 3: Set up firewall (Firewall)

The Mi Router firmware has a built-in firewall:

1. Go to the Supplementary → Security → Firewall.
2. Turn on the options: 🛡️ Packet filtering 🚫 Lockdown ICMP (ping) 🔒 Protection against DoS attacks

Firewall rules

22, 23, 554, 7878

Remote access via Xiaomi cloud is disabled

Removed unnecessary Port Forwarding rules

Firewall (Firewall) is activated

Updated router firmware to the latest version-->

Closing ports on Xiaomi smartphones (Redmi, POCO, Mi)

On Xiaomi smartphones, ports are usually closed by default, but some apps (such as Mi Push Service or other apps) are closed by default. ADB) They can open them up for the background. Here's how to control it:

Method 1: Disabling unnecessary services

Some system services MIUI Open the ports for notification or synchronization, to turn them off:

1. Go to Settings → Applications → Application Management.
2. Find and disable auto-start for: 📱 Mi Push Service (port 37215) 🔄 Mi Cloud Sync (port 443) 🎮 Game Turbo (can open ports for multiplayer)

Settings → Accounts → Mi Account

Synchronization of data

Method 2: Locking ports through the MIUI Firewall

MIUI It has a built-in firewall, but it is hidden in the developer settings:

1. Activate Developer Mode: Go to Settings → About Phone and click on MIUI Version 7 times.
2. Back to Settings → Additionally. → For developers.
3. Find the Network Firewall (MIUI Firewall and turn it on.
4. Add locking rules for ports 5555 (ADB) 7878 (MiIO) if not in use.

Closing ports on Xiaomi smart devices (cameras, lamps, sockets)

Xiaomi’s smart devices (such as the Mi Home Security Camera or Yeelight) often require open ports to work over the Internet.

Step 1: Disable Remote Access in Mi Home

By default, Xiaomi cameras and outlets can be accessed from anywhere in the world, to limit access to only the home network:

1. Open the Mi Home app.
2. Select a device (such as a camera).
3. Go to Settings. → Public access.
4. Turn off the options: 🌍 Remote access 🔗 Linked public access

Step 2: Changing ports by default

Some devices (e.g. cameras) use standard ports that are scanned by bots, and can be changed:

1. In Mi Home, select the device → Settings → Additionally.
2. Find the Network Settings or Port section RTSP (camera-wise).
3. Change the port from 554 to a random port (e.g. 12345).
4. Save and restart the device.

Step 3: Locking devices in the router

If a smart device doesn’t need to access the internet (like a Yeelight bulb that you only control over a local area network), lock it. MAC-router:

1. Find it. MAC-Device address in Mi Home (Device About section).
2. In the router's web interface, go to Additional → Access control.
3. Add a lock rule to this MAC-Addresses with effect Prohibit access to WAN.

⚠️ Note: If you use Xiaomi on a corporate network, port closures may conflict with company policies (e.g., lockdowns). VPN or RDP). Before the changes, agree with them. IT-department!

FAQ: Frequent questions about closing ports on Xiaomi