CyberHunter
LinkedIn profile - Bastien Cordier Email: contact@bastiencordier.pro
// Messaging & queues

Port 15672: RabbitMQ management

RabbitMQ web management interface.

15672

How RabbitMQ management works

Messaging & queues
browser:15672pw=1234 browser:15672pw=1234

A browser sends an HTTP request to port 15672 and the RabbitMQ management server sends the page back. It travels in clear text: anyone on the path can read it, passwords included.

Transport
TCP
Exposure risk
6/10 high if reachable from the Internet
Encryption
Clear textreadable on the network
IANA status
Unassignedcommon use differs from the registry
Range
Registered (1024-49151)
Category
Messaging & queues
01 Security

Is port 15672 dangerous?

Common attacks and weaknesses

  • guest/guest default login.

How to secure it

  • Remove the guest user and restrict access.

Unofficial use. The IANA assignment below differs from what is usually found on this port in practice.

02 Registry

IANA registry entries for port 15672

No entry. The port is free for any application, so check what uses it on your hosts.

// source: IANA service name and port number registry

03 Check it

Which program uses port 15672, and is it reachable?

Linux

sudo ss -ltnup 'sport = :15672'      # process listening on 15672
sudo lsof -nP -i :15672

macOS

sudo lsof -nP -i :15672

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 15672 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 15672
netstat -ano | findstr :15672

From another machine

nmap -p 15672 -sV <host>
nc -zv <host> 15672

Block it in the firewall

sudo ufw deny 15672/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 15672" -Direction Inbound -LocalPort 15672 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 15672 used for?

RabbitMQ web management interface.

Is port 15672 TCP or UDP?

Port 15672 is registered for TCP.

Is it safe to open port 15672?

It is rated 6/10 (high) when exposed to the Internet. guest/guest default login. Remove the guest user and restrict access.

How do I check if port 15672 is open?

On Linux run "ss -ltnup 'sport = :15672'", on macOS "lsof -nP -i :15672", and on Windows "netstat -ano | findstr :15672" to see the local process. From another machine, "nmap -p 15672 <host>" shows whether it is reachable.

05 Related
:5672 AMQP (RabbitMQ) tcp · udp · sctp · high risk :9092 Apache Kafka tcp · udp · high risk :2181 ZooKeeper tcp · udp · high risk :1881 IBM WebSphere MQ Everyplace tcp · udp :2230 MetaSoft Job Queue Administration Service tcp · udp :2664 Patrol for MQ GM tcp · udp :2665 Patrol for MQ NM tcp · udp :2873 PubSub Realtime Telemetry Protocol tcp · udp

Latest vulnerability news

All news