Port 9200: Elasticsearch

HTTP API of Elasticsearch.

Port
9200
Protocol
TCP
Service
Elasticsearch
Exposure
Do not expose to the internet

What is port 9200 used for?

Search and log analytics.

Is it safe to expose port 9200 to the internet?

Open instances leak data and get wiped. Never expose without authentication.

If port 9200 seems closed or unreachable

  1. Check that the Elasticsearch service is running and listening on port 9200, not only on 127.0.0.1.
  2. Check the firewall on the host itself (Windows Defender Firewall, iptables, nftables, ufw) for a rule that allows TCP 9200.
  3. If the host is behind a router, confirm the forwarding rule points to the correct internal address and that your internet provider does not use carrier-grade NAT.
  4. Test from outside your own network. A port can be open locally and blocked at the edge, or the other way round.

Using port 9200 safely

Treat port 9200 as an internal-only service. Reach it through a VPN or an SSH tunnel, restrict it by source address, and keep the software that listens on it patched.

Check whether port 9200 is open on your host

The check connects from our server, so it shows what the internet can reach.

Open the port checker