Internet-Security.com TCP port 9083 details

Apache Hive Metastore’s Thrift service listens on TCP 9083 by default.
Big-data engines such as Trino/Presto, Spark SQL, Impala, and Flink connect to the Hive Metastore on 9083 to read/write table metadata (including for Iceberg and Hudi catalogs).
Common distributions (Cloudera CDP, former Hortonworks/Ambari-based clusters) expose the Hive Metastore on 9083 within the cluster.
Managed platforms often use the same port: AWS EMR, Google Cloud Dataproc, and Azure HDInsight commonly run or connect to a Hive Metastore service on 9083.
Real-world examples include EMR or Databricks configured with an external Hive Metastore (e.g., on an EC2 VM or on-prem server) reachable at port 9083, and Cloudera clusters where Impala/Trino point to hs2-metastore hosts on 9083.
Security note: When exposed to the internet or misconfigured without authentication, Hive Metastore on 9083 has been abused to enumerate/alter schema metadata via Thrift, potentially leading to data exposure or query manipulation.

TCP 9083