Port 9000: PHP-FPM / various

What is port 9000 used for?

PHP-FPM’s common FastCGI port, also used by SonarQube, Portainer and MinIO.

Should port 9000 be open?

Local or internal use. It’s meant for development machines or local networks, not the public internet. PHP-FPM must only be reachable by the web server: an exposed FastCGI port can allow remote code execution.

See what is listening on port 9000

# Linux
sudo ss -tlnp | grep ':9000 '

# macOS
sudo lsof -nP -i TCP:9000 -sTCP:LISTEN

# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 9000 -State Listen

Open or block port 9000 in a firewall

# Ubuntu / Debian (ufw)
sudo ufw allow 9000/tcp
sudo ufw deny 9000/tcp

# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 9000" -Direction Inbound -Protocol TCP -LocalPort 9000 -Action Allow

On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.

Test it from outside

A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 9000 (macOS/Linux) or Test-NetConnection example.com -Port 9000 (Windows).