Internet-Security raven logo internet-security.com

TCP 9990

ProtocolTCP
Port9990
Labels

Synopsis

  • WildFly uses TCP port 9990 by default for its HTTP management interface (admin console and management API), with HTTPS on 9993.
  • Red Hat JBoss Enterprise Application Platform (EAP) 6/7 also defaults to 9990 for the HTTP management endpoint in both standalone and domain modes.
  • JBoss AS 7 (the predecessor to WildFly) exposes its HTTP management on 9990, while its legacy native management used 9999.
  • Keycloak’s older WildFly-based distribution (including Red Hat Single Sign-On) inherits port 9990 for the management interface.
  • Red Hat Data Grid/Infinispan Server, built on WildFly, similarly listens on 9990 for management unless reconfigured.
  • In practice, administrators access the management console or API on 9990 (for example, http://host:9990/management or the HAL console).
  • Security note: attackers routinely scan for exposed 9990 on WildFly/JBoss servers; weak/default credentials or misconfigurations have been abused to obtain admin access and deploy malicious applications.

Observed activity

Last 30 days Detailed chart

More information