Port 15672 (RabbitMQ management UI)

RabbitMQ management web UI and HTTP API.

Registered (user) port, 1024-49151 TCP Message queues Expose only to trusted sources

What port 15672 is used for

RabbitMQ management web UI and HTTP API.

Security: should port 15672 be open?

Expose only to trusted sources. Restrict to admins. Change or delete the guest user and use strong passwords; the API can read and publish messages.

IANA assignment

Port 15672 is in the registered range and has no IANA assignment. The usage above is unofficial but widespread.

Check what is listening on port 15672

Linux: is anything listening on TCP 15672?

sudo ss -tlnp 'sport = :15672'

Linux / macOS: which process owns the port

sudo lsof -nP -i :15672

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':15672 '

Windows (Command Prompt)

netstat -ano | findstr :15672

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 15672 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine

nc -vz -w 5 HOST 15672

From Windows

Test-NetConnection HOST -Port 15672

Allow only trusted sources on port 15672 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 15672 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 15672 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 15672 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 15672 accept
sudo nft add rule inet filter input tcp dport 15672 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 15672 trusted' -Direction Inbound -Protocol TCP -LocalPort 15672 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.