Database
Risk: Critical
Port 9200 — Elasticsearch / OpenSearch REST API
Port 9200 is used by Elasticsearch and OpenSearch for handling JSON HTTP REST queries, indexing documents, and cluster management.
PORT NUMBER
9200
PROTOCOL
TCP
DEFAULT PROCESS
java, elasticsearch
FIREWALL TARGET
9200/tcp
Instant Terminal Fixes for Port 9200
macOS & Linux Terminal
1. Check who is listening on port 9200:
curl -I http://localhost:92002. Kill process occupying port 9200 (EADDRINUSE fix):
sudo systemctl stop elasticsearch || sudo kill -9 $(sudo lsof -t -i:9200)3. UFW Firewall Allow rule:
sudo ufw deny 9200Windows PowerShell (Admin)
1. Check listening port:
Get-NetTCPConnection -LocalPort 92002. Force kill process on port 9200:
Stop-Service elasticsearch -Force3. Docker Port Forwarding Mapping:
docker run -p 9200:9200 -e discovery.type=single-node -d elasticsearch:8.10.0Common Error Encountered
Connection refused: could not reach Elasticsearch REST API at localhost:9200
Security Advisory & Hardening
Ensure X-Pack security (`xpack.security.enabled: true`) is active. Never expose port 9200 to public internet without basic authentication and TLS.
Frequently Asked Questions
Port 9200 Questions & Answers
Common questions regarding default services, kill commands, and firewall configurations.
Port 9200 is commonly used for Elasticsearch / OpenSearch REST API. Port 9200 is used by Elasticsearch and OpenSearch for handling JSON HTTP REST queries, indexing documents, and cluster management.