Port 9092 (Apache Kafka)

Kafka broker listener (PLAINTEXT by default).

Registered (user) port, 1024-49151 TCP Message queues Do not expose to the internet

What port 9092 is used for

Kafka broker listener (PLAINTEXT by default).

Security: should port 9092 be open?

Do not expose to the internet. A default Kafka listener has no authentication or encryption. Keep it private, or configure SASL_SSL listeners and ACLs before any external access.

IANA assignment

Service nameProtoDescriptionAssigneeReference

XmlIpcRegSvc TCP Xml-Ipc Server Reg Casey Harrington -

XmlIpcRegSvc UDP Xml-Ipc Server Reg Casey Harrington -

Registry dates for this port: registered 2006-01.

Check what is listening on port 9092

Linux: is anything listening on TCP 9092?

sudo ss -tlnp 'sport = :9092'

Linux / macOS: which process owns the port

sudo lsof -nP -i :9092

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':9092 '

Windows (Command Prompt)

netstat -ano | findstr :9092

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 9092 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine

nc -vz -w 5 HOST 9092

From Windows

Test-NetConnection HOST -Port 9092

Block port 9092 in the firewall

ufw

sudo ufw deny 9092/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 9092 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 9092 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 9092' -Direction Inbound -Protocol TCP -LocalPort 9092 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.