Port 9001 (Tor ORPort / MinIO console)

Common Tor relay ORPort (relays choose their port), the MinIO web console in many deployments, and Supervisor's inet HTTP server.

Registered (user) port, 1024-49151 TCP Proxies and Tor Expose only to trusted sources

What port 9001 is used for

Common Tor relay ORPort (relays choose their port), the MinIO web console in many deployments, and Supervisor's inet HTTP server.

Expose only to trusted sources. Tor relays must expose their ORPort. Admin consoles such as MinIO or Supervisor should not be public.

Service nameProtoDescriptionAssigneeReference

etlservicemgr TCP ETL Service Manager Stephen McCrea -

etlservicemgr UDP ETL Service Manager Stephen McCrea -

Registry dates for this port: registered 2002-03.

Linux: is anything listening on TCP 9001?

sudo ss -tlnp 'sport = :9001'

Linux / macOS: which process owns the port

sudo lsof -nP -i :9001

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':9001 '

Windows (Command Prompt)

netstat -ano | findstr :9001

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 9001 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 9001

From Windows

Test-NetConnection HOST -Port 9001

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 9001 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 9001 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9001 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 9001 accept
sudo nft add rule inet filter input tcp dport 9001 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 9001 trusted' -Direction Inbound -Protocol TCP -LocalPort 9001 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.