Internet-Security raven logo internet-security.com

TCP 11112

ProtocolTCP
Port11112
LabelsACR/NEMA Digital Imaging and Communications in Medicine (DICOM)

Synopsis

  • TCP port 11112 is commonly used by DICOM medical-imaging services (DIMSE).
  • The dcm4chee-arc-light PACS (from the dcm4che project) uses 11112 as its default DICOM association listener port in its standard and Docker distributions.
  • DCMTK-based servers (e.g., storescp, dcmqrscp) are frequently run on 11112 in documentation and real deployments to avoid privileged port 104.
  • Many DICOM clients/viewers (OsiriX/Horos, RadiAnt, Weasis, 3D Slicer) are often configured to connect to PACS servers listening on 11112, especially dcm4chee or DCMTK instances.
  • The pynetdicom toolkit’s example servers also commonly use 11112 for testing and integration setups.
  • Security note: attackers and researchers scan 11112 for exposed DICOM services, and misconfigured PACS (including dcm4chee) have been implicated in PHI leaks and past vulnerabilities.

Observed activity

Last 30 days Detailed chart

More information