Port 104DICOM

DICOM (Digital Imaging and Communications in Medicine) is an international standard for transmitting, storing, retrieving, printing, and displaying medical imaging information. It enables seamless interoperability between medical imaging devices, systems, and healthcare providers around the world, facilitating accurate diagnostics and efficient patient care..

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
13,115

rank 287 of 993 · top 29%

Technical Details

what runs on :104

DICOM (Digital Imaging and Communications in Medicine), originally specified by ACR/NEMA, defines a comprehensive standard that governs the communication and management of medical imaging information and related data across diverse hardware and software systems. It prescribes a communication protocol, file format, and data structure to ensure accurate exchange of diagnostic images, waveform data, annotations, reports, and patient information. The protocol typically operates over TCP/IP networks, primarily utilizing port 104, for secure and reliable data transmission between modalities, PACS servers, and viewing workstations.

DICOM supports various imaging modalities such as MRI, CT, X-rays, ultrasound, and nuclear medicine, offering interoperability between equipment regardless of vendor. The standard specifies data encoding rules and service classes for functions including image query/retrieve, storage, print management, and modality worklist management. Its extensible architecture permits the integration of additional services over time, aligning with advances in medical imaging technology.

Port 104 is often used as a default listener on PACS (Picture Archiving and Communication System) servers, where imaging modalities send or request DICOM-formatted files. While TCP is standard for reliable transfer, DICOM services can be transferred over UDP in some scenarios, though the emphasis is generally on reliable, orderly, connection-oriented communication.

Security Information

exposure of :104

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 3.9 across 604 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • Lack of encryption on traditional DICOM communications over port 104 may expose sensitive patient and imaging data to interception.
  • Default configurations and lack of authentication can enable unauthorized access to imaging systems or data exfiltration.
  • Potential buffer overflow vulnerabilities in DICOM servers due to improper parsing of image or query data.
  • Susceptibility to denial-of-service attacks through malformed DICOM messages.

Common Mitigations:

  • Employing Transport Layer Security (TLS) to encrypt DICOM data in transit (e.g., DICOM with TLS).
  • Enforcing strict authentication and access controls on imaging devices and PACS servers.
  • Regularly updating and patching DICOM software to close security vulnerabilities.
  • Network segmentation to isolate imaging systems from general-purpose networks.
  • Implementing intrusion detection systems to monitor for anomalous traffic over port 104.
  • Using secure alternatives or secure VPN tunnels when transmitting DICOM data externally.

the 8 most looked-up other ports in network services — 604 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted