Is port 9389 (Active Directory Web Services) dangerous?

Port 9389 is classified as high risk. It is a common target for automated scanning and brute-force attacks. Restrict access to trusted IPs if exposure is necessary.

Should port 9389 be open on my firewall?

Port 9389 should only be open with strict firewall rules whitelisting trusted IP addresses. Enable rate limiting and intrusion detection systems.

What transport protocol does port 9389 use?

Port 9389 (Active Directory Web Services) uses the TCP transport protocol and falls under the System & Infrastructure category.

:9389 (TCP)

Active Directory Web Services

High Risque

TCP — System & Infrastructure

Aperçu du port

Numéro de port 9389

Nom du service Active Directory Web Services

Protocole de transport TCP

Catégorie System & Infrastructure

Risque de sécurité High

Plage de ports Enregistré (1024-49151)

Qu'est-ce que le port 9389?

Port 9389 is used by Active Directory Web Services (ADWS), a Windows service introduced in Windows Server 2008 R2 that provides a web service interface to Active Directory domain services. PowerShell Active Directory cmdlets and Active Directory Administrative Center use this port to communicate with domain controllers. This port is required for modern Windows AD administration tools.

TCP System & Infrastructure

Considérations de sécurité

Le port 9389 (Active Directory Web Services) est classifié comme risque élevé. Ce port est une cible fréquente pour les scans automatisés et les attaques par force brute. Si vous devez l'exposer, restreignez l'accès aux adresses IP connues.

Recommandation : Utilisez des règles de pare-feu pour mettre en liste blanche les IPs de confiance. Activez la limitation de débit et la détection d'intrusion.

Ports associés — System & Infrastructure

0 Reserved 1 TCPMUX 2 Management Utility 3 CompressNET 4 Unassigned 5 RJE 6 Unassigned 7 Echo

Termes associés

Bandwidth Latency Packet Loss Ping Throughput ASN