Skip to content
RU

Port 1883: MQTT IoT broker (plain)

Key idea:

Port 1883 (TCP) is the standard for MQTT IoT broker (plain). MQTT (Message Queuing Telemetry Transport) — lightweight pub/sub for IoT. Runs over TCP. Standard port 1883 (plain). TLS-encrypted traffic uses 8883. Brokers: Mosquitto, EMQX, Hi

Below: what uses this port, security considerations, online check, FAQ.

Check your host & ports →

What is on this port

MQTT IoT broker (plain)

MQTT (Message Queuing Telemetry Transport) — lightweight pub/sub for IoT. Runs over TCP. Standard port 1883 (plain). TLS-encrypted traffic uses 8883. Brokers: Mosquitto, EMQX, HiveMQ, AWS IoT Core.

Security considerations

Never expose 1883 to the public internet — all messages in plain text. Use 8883 (TLS) + client certificate authentication.

Check this port online

Check port online →

Enterno.io Ping + Port checker tests TCP reachability of any port from 3 regions (Moscow / Frankfurt / Virginia).

What Devices Use Port 1883 for MQTT?

Port 1883 is predominantly used by devices in the Internet of Things (IoT) ecosystem that utilize the MQTT protocol for communication. The following are common devices and applications that leverage this port:

  • Smart Home Devices: Many smart home systems, such as smart thermostats, lighting control systems, and security cameras, utilize MQTT for efficient communication with a central broker over port 1883.
  • Industrial IoT Sensors: Sensors in industrial environments often send telemetry data to an MQTT broker using this port, enabling real-time monitoring and control.
  • Wearable Devices: Wearables such as fitness trackers and health monitors may use MQTT to transmit data to a cloud service, ensuring low bandwidth usage and battery efficiency.
  • Automotive Applications: Modern vehicles equipped with IoT capabilities often employ MQTT over port 1883 for telemetry and diagnostics.

These devices benefit from the lightweight nature of MQTT, which is designed for low-bandwidth, high-latency networks typical in IoT environments. By utilizing port 1883, they can efficiently publish and subscribe to messages in a scalable manner.

Security Considerations for Using Port 1883

While using port 1883 for MQTT communication is standard, it is critical to consider the security implications associated with unencrypted data transmission. Here are key security considerations:

  • Data Exposure: MQTT over port 1883 transmits data in plain text, making it vulnerable to eavesdropping. Any sensitive data sent through this port can be intercepted by malicious actors.
  • Authentication: Implementing robust authentication mechanisms is essential. Utilize username and password credentials or certificate-based authentication to restrict access to the MQTT broker.
  • Access Control: Configure access control lists (ACLs) to limit which devices or users can publish or subscribe to specific topics. This helps mitigate the risk of unauthorized access.
  • Monitoring and Logging: Regularly monitor and log MQTT traffic on port 1883 to detect any unusual patterns or potential security breaches.
  • Upgrade to TLS: For enhanced security, use TLS encryption on port 8883. This secures the communication channel, protecting data from interception and ensuring integrity.

By recognizing these considerations and implementing appropriate security measures, you can safeguard your IoT deployments that utilize port 1883.

Practical Examples: Configuring MQTT on Port 1883

Configuring MQTT brokers and clients to communicate over port 1883 involves a few straightforward steps. Below are examples for both Mosquitto (a popular MQTT broker) and a basic MQTT client configuration.

Mosquitto Broker Configuration

To set up Mosquitto on port 1883, follow these steps:

  1. Install Mosquitto using your package manager:
sudo apt-get install mosquitto
  1. Configure Mosquitto to listen on port 1883 by editing the configuration file (/etc/mosquitto/mosquitto.conf):
listener 1883

To enable anonymous access (not recommended for production):

allow_anonymous true
  1. Start the Mosquitto service:
sudo systemctl start mosquitto

MQTT Client Example

Here’s how to publish and subscribe to a topic using the command line with mosquitto_pub and mosquitto_sub:

  1. Subscribe to a topic:
mosquitto_sub -h localhost -p 1883 -t 'test/topic'
  1. Publish a message to that topic:
mosquitto_pub -h localhost -p 1883 -t 'test/topic' -m 'Hello MQTT!'

In these examples, we configured Mosquitto to listen on port 1883 and demonstrated how to publish and subscribe to messages. This basic setup allows for rapid testing and development of IoT applications utilizing MQTT.

ICMP PingHost availability and latency
Port ScannerOpen TCP port detection
LatencyResponse time in milliseconds
Packet LossPercentage of dropped packets

Why teams trust us

ICMP+TCP
check protocols
14
key ports scanned
2,014
checks in 30 days
3
regions

How it works

1

Enter IP or domain

2

ICMP packets sent

3

Latency & packet loss shown

How Do Ping and Port Scanning Work?

Ping sends ICMP packets to a host and measures response time. Port scanning checks which TCP ports are open and accepting connections — helping diagnose serviceavailability issues.

Configurable Ping

Choose packet count (3, 4, 6, 10). Stats: min/avg/max latency and packet loss.

Common Port Scanner

Check 14 key ports: HTTP, HTTPS, SSH, FTP, SMTP, MySQL, PostgreSQL, and more.

Cloud-Based Check

Testing from our server — see site availability from outside, not just your local network.

Uptime Monitoring

Need constant monitoring? Create a monitor — checks every minute with notifications.

Who uses this

DevOps

availability diagnosis

Network engineers

TCP port scanning

Developers

connection debugging

SRE

basic health check

Common Mistakes

ICMP blocked = server is downMany servers block ICMP. Ping fails but site works — check ports instead.
High ping = server problemLatency depends on geography. 150ms between continents is normal, not an error.
Closed ports — cause for alarmClosed ports of unused services are good. Unnecessary open ports are a risk.
One check = sufficientNetworks are unstable. A single timeout ≠ a problem. Check multiple times or set up monitoring.

Best Practices

Combine ping and port checksPing shows host availability, ports show specific service availability. Use both.
Check from different locationsThe problem may be local. A cloud test shows the real picture.
Close unused portsEvery open port is a potential attack vector. Keep only necessary ports open.
Set up monitoringManual checks do not scale. Set up automated monitoring with notifications.

Get more with a free account

Ping check history, host availability monitoring and downtime alerts.

Sign up free

Learn more

Frequently Asked Questions

Is port 1883 open by default?

No, modern cloud providers (AWS, Google Cloud, Yandex) close all incoming ports by default. You must explicitly allow port 1883 in a Security Group or firewall.

How to check if my port 1883 is reachable?

Use Enterno Ping + Port Checker. Or in shell: nc -vz example.com 1883 or telnet example.com 1883.

Is port 1883 safe to expose?

Depends on the service. MQTT IoT broker (plain) should never be exposed publicly without authentication + TLS. See our 2026 exposure research.

Try the live tool that powered this guide

Free plan — 10 monitors, checks every 5 min, no card required. Upgrade for 1-minute interval and multi-region monitoring.