Port 9000 — PHP-FPM / SonarQube / Portainer

TCP registered

What runs on port 9000

Shared by several services — most commonly PHP-FPM, but also SonarQube and Portainer.

Security considerations

PHP-FPM on 9000 must never be internet-reachable; it executes arbitrary scripts by design.

Checking whether something is listening

# Linux / macOS — what is bound to the port
sudo lsof -i :9000
sudo ss -lntp | grep :9000

# Windows
netstat -ano | findstr :9000
Get-NetTCPConnection -LocalPort 9000

# is it reachable from outside?
nc -zv example.com 9000
curl -v telnet://example.com:9000

Freeing the port

# find the process, then stop it
sudo lsof -ti :9000 | xargs kill        # Linux / macOS
netstat -ano | findstr :9000            # note the PID, then:
taskkill /PID <pid> /F                    # Windows

Should this port be open to the internet?

No. Port 9000 should never be reachable from a public address. Bind it to localhost or a private network, and reach it through a VPN or bastion host if remote access is genuinely needed. Internet-wide scanners find newly exposed instances of this service within minutes.

Quick reference

Frequently asked questions

Other common ports

• Port 20 — FTP data
• Port 21 — FTP control
• Port 22 — SSH / SFTP
• Port 23 — Telnet
• Port 25 — SMTP
• Port 53 — DNS
• Port 67 — DHCP server
• Port 68 — DHCP client
• Port 69 — TFTP
• Port 80 — HTTP
• Port 110 — POP3
• Port 123 — NTP
• Port 143 — IMAP
• Port 161 — SNMP
• Port 389 — LDAP
• Port 443 — HTTPS
• Port 445 — SMB
• Port 465 — SMTPS

All port numbers