9527 - Sofia telnet-based debug console
8899 - ONVIF
34567 - Main Sofia port: authorization, CMS, proprietary video streaming.

80/tcp (http, uc-httpd 1.0.0, Web UI)
554/tcp (rtsp, H264DVR 1.0, H.264 video stream)
3702/udp (SOAP / ONVIF / ws-discovery, gSOAP 2.7)
8899/tcp (SOAP / ONVIF, gSOAP 2.7)
9527/tcp (Telnet, BusyBox v1.16.1 telnetd)
9530/tcp (unknown)
34567/tcp (ipcamera TCP port)

8443/tcp (ipcamera SSL port) // the camera seems to refuse any connection attempts on this one
34568/udp (ipcamera UDP port)
34569/udp (IP Search port)
_________________________