Port 8883: MQTT over TLS
Port 8883 is MQTT over TLS, the encrypted version of the smart-home and IoT messaging protocol.
What runs on port 8883
MQTT brokers offer TLS-encrypted connections on TCP 8883 so device messages and passwords are not sent in the clear. Cloud IoT platforms such as AWS IoT Core and Azure IoT Hub use it, and self-hosted brokers like Mosquitto can be set up for it.
On a home network
Smart-home devices that talk to a vendor cloud often connect out to 8883, which is normal. A home broker listens on 8883 only if you configured TLS.
If port 8883 is reachable from the internet
Encryption protects the traffic, but a broker that lets anyone log in, or uses weak passwords, still exposes every message and command. If you run a broker on 8883 for remote devices, require strong credentials or client certificates.
How to check whether it is open on your network
Check your broker's listener and authentication settings, and whether your router forwards 8883 to it.
To find out whether port 8883 is open on something in your home, and whether the internet can reach it, the app scans your Wi-Fi from your phone and checks your public address from the outside. It says what it checked and what it could not. Get RECON for iPhone — one-time purchase, no account, nothing leaves the device.