:8009
(TCP)
Apache JServ Protocol (AJP)
Critical 风险TCP — Web
On this page
端口概览
端口号
8009
服务名称
Apache JServ Protocol (AJP)
传输协议
TCP
类别
Web
安全风险
Critical
端口范围
已注册 (1024-49151)
什么是端口 8009?
Port 8009 is the default port for Apache JServ Protocol (AJP), used to proxy requests from an Apache HTTP server to Apache Tomcat or other Java application servers. The Ghostcat vulnerability (CVE-2020-1938) allowed unauthenticated file reads and RCE through AJP, resulting in widespread exploitation of exposed port 8009. This port should be disabled or restricted if not actively used for reverse proxying.
TCP
Web
常用
安全注意事项
端口8009（Apache JServ Protocol (AJP)）被归类为严重风险。此端口不应暴露在公网上。该服务在未加密的情况下传输数据，容易受到窃听、凭据窃取和中间人攻击。
建议：在防火墙处封锁此端口。改用加密替代方案（SSH、SFTP、HTTPS）。