i am just surprised to be the only one to use a firewall on gemini...
ah, no, you aren't, I use it, too, or at least I used it for quite a while, until I found out that it interferes with VPN-connections (because it establishes an internal VPN-connection of its own), so I only can have the firewall or VPN, but not both at the same time. But since I never saw any suspicious activity, I still felt safe to deactivate the firewall. Now I activated it once again, and I'll watch for connections of the kind you described. I'll report in a few days.
Somewhere I read the advice to deactivate all "MTK" apps and services possible. They seem to "phone home" so much that they might be considered spyware. I am not suggesting that you do that, but you might consider investigating what "com.mediatek.bluetooth.dtt" actually does and whether it is neccessary.
I wouldn't be surprised if any of all those shiny apps and services - not only the MTK ones - established connections to who knows where. So called "app development" nowadays is mostly pasting together preconfigured modules from a software development kit, and mostly noone seems to bother or ask what those modules do besides what there are meant for. I had a harsh discussion with a supplier of a product coming bundled with an Android app about unwanted network connections, and they finally admitted that they had just taken modules, let's say for "cloud storage", from some kit and put it in, without knowing what they got in addition. The "addition" were at least five different connections with unknown purpose to servers in China and the like.
Well, you seem to make progress, and I wish you good success to finally get a port-10000-free Gemini.
P.S.: on my Gemini no "com.mediatek.bluetooth.dtt" service is running, bluetooth on or off. When I activate bluetooth - which I usually haven't - there is a "com.android.bluetooth" process running, which vanishes again when I deactivate bluetooth.
Strange enough there are a lot of place where you can download the "Mediatek Bluetooth Tool" apk, but I found no explanation so far what it actually is supposed to do.