There are a few, they are only used for device discovery, and you can run your own on either side of the GFW. Search the documentation for "discovery server".
The actual protocol used is all TLS, which means it looks mostly like everything else in the world. By default the certificates include the name "syncthing" making the connections fairly easy to recognize anyway. You can replace the certificates if you like.