Port 9200 (Elasticsearch)
Elasticsearch REST API.
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Unauthenticated Elasticsearch clusters are behind many large data leaks.
- Older versions had no authentication by default.
When it shows up in your logs
Internet requests to 9200 are scanning for exposed data.
Related ports
- 5601 Kibana
- 9300