ZoomEye finds 2.1M services on AJP port 8009

ZoomEye indexed 2,107,044 services on port 8009, the default Apache Tomcat AJP connector port. The ajp13 fingerprint returns 1,240,557 hosts, while 620,164 answer HTTP on the same port, which a properly fronted connector should not do.

• 2,107,044 services on port 8009 per ZoomEye
• 1,240,557 hosts fingerprinted as ajp13
• 620,164 hosts answer HTTP on the AJP port
• TLS handshakes on 8009 seen 64,404 times