Network Port: 9200
Network Port Reference Guide
Registered Service Name
Elasticsearch HTTP API
Transport Protocol
TCP
Functional Overview
Port 9200 is used by Elasticsearch RESTful search engine nodes for HTTP JSON client queries and index management.
Security Risks & Vulnerabilities
Exposed Elasticsearch instances without Shield/X-Pack authentication allow unauthorized users to query, dump, or wipe entire search indexes and log stores.
How to audit network port status
1. Scan Open Ports: Use our Port Scanner utility to verify if this port is actively listening on your host.
2. Verify Encryption: Audit the service layer to confirm SSL/TLS is protecting transmission payload.
3. Hardening Rules: Apply the firewall instructions below to shut down unauthorized inbound ports.
UFW Firewall Rules
Allow Command
sudo ufw allow 9200/tcp
Block Command
sudo ufw deny 9200/tcp
iptables Firewall Rules
Allow Command
sudo iptables -A INPUT -p tcp --dport 9200 -j ACCEPT
Block Command
sudo iptables -A INPUT -p tcp --dport 9200 -j DROP
Port Diagnostic Tools
Authoritative Standards
Port assignments governed by IANA. Well-known ports (0–1023) require IANA approval per RFC 6335.