9200
Elasticsearch HTTP REST API for search and analytics
Elasticsearch HTTP API
What is port 9200?
Port 9200 is the HTTP REST API endpoint for Elasticsearch, one of the most popular search engines and analytics platforms. It is a core component of the ELK Stack (Elasticsearch, Logstash, Kibana) used for log analysis. Older versions had no authentication by default — thousands of exposed instances led to massive data breaches affecting billions of records. Always enable X-Pack security (or OpenSearch Security) and place Elasticsearch behind a firewall.
Quick checks
$
nc -zv example.com 9200
$
nmap -p 9200 example.com
$
telnet example.com 9200