Is port 8009 (Apache JServ Protocol (AJP)) dangerous?

Port 8009 is classified as critical risk and should not be exposed to the public internet. It transmits data without encryption, making it vulnerable to eavesdropping and credential theft.

Should port 8009 be open on my firewall?

No, port 8009 should not be open to the public internet. Block it at the firewall and use encrypted alternatives such as SSH, SFTP, or HTTPS instead.

What transport protocol does port 8009 use?

Port 8009 (Apache JServ Protocol (AJP)) uses the TCP transport protocol and falls under the Web category.

:8009 (TCP)

Apache JServ Protocol (AJP)

Critical Risiko

TCP — Web

On this page

Ikhtisar Port

Nomor Port 8009

Nama Layanan Apache JServ Protocol (AJP)

Protokol Transport TCP

Kategori Web

Risiko Keamanan Critical

Rentang Port Terdaftar (1024-49151)

Apa itu Port 8009?

Port 8009 is the default port for Apache JServ Protocol (AJP), used to proxy requests from an Apache HTTP server to Apache Tomcat or other Java application servers. The Ghostcat vulnerability (CVE-2020-1938) allowed unauthenticated file reads and RCE through AJP, resulting in widespread exploitation of exposed port 8009. This port should be disabled or restricted if not actively used for reverse proxying.

TCP Web Umum Digunakan

Pertimbangan Keamanan

Port 8009 (Apache JServ Protocol (AJP)) diklasifikasikan sebagai risiko kritis. Port ini tidak boleh diekspos ke internet publik. Layanan ini mentransmisikan data tanpa enkripsi, sehingga rentan terhadap penyadapan, pencurian kredensial, dan serangan man-in-the-middle.

Rekomendasi: Blokir port ini di firewall. Gunakan alternatif terenkripsi (SSH, SFTP, HTTPS) sebagai gantinya.

Apache JServ Protocol (AJP)

Ikhtisar Port

Apa itu Port 8009?

Pertimbangan Keamanan

Port Terkait — Web

Istilah Terkait