Hello@ThuraMoe ,
Port 22 is used for the SSH (Secure Shell) service, which provides encrypted communication between devices. On TP-Link range extenders and other products, SSH is enabled specifically to support certain TP-Link mobile apps (such as the Tether app). Only these official apps are allowed to use the SSH service; other SSH clients cannot access or control the extender via SSH commands. This design ensures that the SSH service does not pose a security risk to your device.
Key points:
• Port 22 is open by default for TP-Link app functionality and cannot be changed.
• Other ports (such as 7777 and 11288) being 'filtered' means they are blocked or not in use, which is normal and not a security concern.
• The SSH service is restricted to TP-Link apps only, so unauthorized access via SSH is not possible.
• Your device is not compromised, and it is safe to use.
If you have further concerns about security, you can always keep your device's firmware up to date and use strong Wi-Fi passwords.