9389
Active Directory Web Services
High RiskTCP — System & Infrastructure
Port Overview
Port Number
9389
Service Name
Active Directory Web Services
Transport Protocol
TCP
Category
System & Infrastructure
Security Risk
High
Port Range
Registered (1024-49151)
What is Port 9389?
Port 9389 is used by Active Directory Web Services (ADWS), a Windows service introduced in Windows Server 2008 R2 that provides a web service interface to Active Directory domain services. PowerShell Active Directory cmdlets and Active Directory Administrative Center use this port to communicate with domain controllers. This port is required for modern Windows AD administration tools.
TCP
System & Infrastructure
Security Considerations
Port 9389 (Active Directory Web Services) is classified as high risk. This port is a common target for automated scanning and brute-force attacks. If you must expose it, restrict access to known IP addresses.
Recommendation: Use firewall rules to whitelist trusted IPs. Enable rate limiting and intrusion detection.