Internet-Security raven logo internet-security.com

TCP 10911

ProtocolTCP
Port10911
Labels

Synopsis

  • TCP port 10911 is the default broker listen port for Apache RocketMQ; the broker process accepts producer/consumer client traffic and admin requests on this port (NameServer uses 9876; HA replication commonly uses 10909).
  • Real-world deployments: many self-hosted enterprise RocketMQ clusters (including those based on Alibaba’s open-source RocketMQ 4.x/5.x) expose 10911 for application traffic; managed offerings such as Alibaba Cloud Message Queue for Apache RocketMQ use the same protocol even if the port may be abstracted behind the service.
  • Security note: This port has been widely targeted, including exploitation of CVE-2023-33246 (unauthenticated RCE) where attackers scanned for exposed RocketMQ brokers on 10911/9876 and executed admin commands to run arbitrary code.

Observed activity

Last 30 days Detailed chart

More information