Skip to main content
Back to Home

Network Port: 9200

Network Port Reference Guide

Registered Service Name

Elasticsearch HTTP API

Transport Protocol

TCP

Functional Overview

Port 9200 is used by Elasticsearch RESTful search engine nodes for HTTP JSON client queries and index management.

Security Risks & Vulnerabilities

Exposed Elasticsearch instances without Shield/X-Pack authentication allow unauthorized users to query, dump, or wipe entire search indexes and log stores.

How to audit network port status

1. Scan Open Ports: Use our Port Scanner utility to verify if this port is actively listening on your host.

2. Verify Encryption: Audit the service layer to confirm SSL/TLS is protecting transmission payload.

3. Hardening Rules: Apply the firewall instructions below to shut down unauthorized inbound ports.

UFW Firewall Rules

Allow Command

sudo ufw allow 9200/tcp

Block Command

sudo ufw deny 9200/tcp

iptables Firewall Rules

Allow Command

sudo iptables -A INPUT -p tcp --dport 9200 -j ACCEPT

Block Command

sudo iptables -A INPUT -p tcp --dport 9200 -j DROP