Internet-Security.com TCP port 9009 details

ClickHouse uses TCP port 9009 as its interserver HTTP port (interserver_http_port) for replication and shard-to-shard data exchange.
Oracle GlassFish Server and Payara Server use TCP 9009 as the default JPDA/JDWP remote debugging port when started in debug mode.
In practice, many Java applications are configured to expose JDWP on TCP 9009 in development and container/Kubernetes setups, even if it isn’t their official default.
Security note: Exposed JDWP on 9009 is frequently exploited for remote code execution, since an attacker who can connect to the debug port can control the JVM.

TCP 9009