Port 9389Active Directory Web Services (ADWS)

Microsoft ADWS provides a SOAP-based management interface to Active Directory Domain Services and Lightweight Directory Services.

inNetwork Services System

transport: tcp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

Technical Details

what runs on :9389

ADWS uses SOAP over a WCF net.tcp endpoint, normally on TCP 9389, with Windows-integrated authentication and transport security in standard deployments. It is distinct from LDAP on TCP/UDP 389, LDAPS on TCP 636, and the global catalog ports 3268/3269; clients need ADWS available on the domain controller for ADWS-based management tools.

Security Information

exposure of :9389

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,778 ports — this one sits 4.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

ADWS exposes directory-management operations, so a reachable service can be targeted for authentication attacks and, with valid authorized credentials, sensitive directory queries or changes. Keep it on trusted management and domain networks rather than exposing it to the internet, and restrict access with network controls and least-privilege accounts.

Record

iana registry entry

port: :9389
service: Active Directory Web Services (ADWS)
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Network Services System
usage: Windows Server's ADWS service listens on TCP port 9389 and provides directory-management access to AD DS and AD LDS. Engineers commonly encounter it when using the Active Directory PowerShell module or Active Directory Administrative Center.
lookups: 0rank 993
added: 2026-10-12
updated: 2026-10-12
references: IANA Service Name and Transport Protocol Port Number Registry
Microsoft: Service overview and network port requirements for Windows

Something wrong?

This record is maintained by the engineers who use port 9389. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-12.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,778 in network services →

the 8 most looked-up other ports in network services — 1,778 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :9389Active Directory Web Services (ADWS)

Technical Details

Security Information

Related Ports

Port 9389Active Directory Web Services (ADWS)