Port 11112DICOM
DICOM medical-imaging application traffic, commonly served on TCP 11112 by imaging systems and test tools.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 6/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 993 of 6,255 · top 16%
also known as DICOM networking, DICOM SCP
Technical Details
what runs on :11112DICOM networking on TCP begins with an association negotiation: the client sends an A-ASSOCIATE request and the server accepts or rejects it, after which they exchange DICOM protocol data units carrying DIMSE operations such as image storage, query, and retrieval. Port 11112 is widely used as a configurable DICOM listener, while 104 is the standard DICOM port; DICOM over TLS is also supported, commonly on port 2762, but encryption is not implied by using 11112. The registry lists UDP as well, though normal DICOM association and DIMSE traffic use TCP rather than UDP.
Security Information
exposure of :11112risk score
6/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
network services averages 2.6 across 1,886 ports — this one sits 3.4 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
A publicly reachable DICOM listener may permit unauthenticated clients to query or retrieve sensitive medical images and metadata, or submit objects, depending on its configuration and implementation. DICOM traffic is commonly unencrypted unless TLS is explicitly configured, so keep listeners behind trusted networks or VPNs, restrict permitted peers, and patch the implementation; internet exposure is generally inappropriate.
Related Ports
the 8 most looked-up other ports in network services — 1,886 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted