UDP 6673 (vision_elmd) uploads to Verizon servers

Follow

Daniel Velez

• July 01, 2022 17:53
• Edited

My FWG alerted me to unusual uploads to a Verizon Business IP (174.192.199.102) using UDP 6673 - I saw my son's phone uploading in batches over night for over 3GB total upload. I verified it wasn't Verizon Cloud (not configured). A call to Verizon got me a cheerful tech in the consumer side but we hit a brick wall as soon as I said the data moved over Wifi.

I've seen some info about this port being used by some Windows mail spamware and I suppose this could be the case but I'm looking for ideas about the behavior.

What do you think?

Dan 

0

• 

  Firewalla

  • July 01, 2022 19:35

  Why don't you block that port or that IP and see? I am curious if it is a backup site for phone data

  0

  Comment actions Permalink
• 

  Daniel Velez

  • July 01, 2022 19:49

  Yep, already done.  If this is a common VZW service I would have expected to easily find some description on these forums or the internet. I haven't, so I blocked it...still, looking for any known data on the service.

  Tnx

   

  0

  Comment actions Permalink
• 

  Daniel Velez

  • July 01, 2022 20:20

  I have 5 Pixels on the account and this phone is the only one making this kind of connection, so that's more alarming for me.

  0

  Comment actions Permalink

Please sign in to leave a comment.