{
  "port": 8007,
  "protocol": "tcp",
  "service": "AJP 1.2 (legacy), IANA: warppipe",
  "oneLiner": "The old Apache JServ Protocol port — the ancestor of Tomcat's AJP connector on 8009.",
  "whatItIs": "IANA registers 8007 as warppipe, an I/O-oriented cluster computing product. Nmap names it `ajp12`, after the first version of the Apache JServ Protocol that Tomcat and JServ once served here before AJP/1.3 settled on 8009. Modern Tomcat has no AJP 1.2 connector, so a live 8007 is either something very old in a Java stack or an unrelated application that picked a free port near 8000.",
  "exposure": {
    "verdict": "never",
    "note": "AJP in any version is a trusted back-channel between a web server and a servlet container, with no authentication of its own — the Ghostcat class of bug (CVE-2020-1938 on 8009) is what an exposed AJP connector costs."
  },
  "checkCommand": "nmap -sV -Pn -p 8007 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8007 (warppipe)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8007",
      "kind": "iana"
    },
    {
      "title": "Apache Tomcat 9 — The AJP Connector",
      "url": "https://tomcat.apache.org/tomcat-9.0-doc/config/ajp.html",
      "kind": "official-docs"
    },
    {
      "title": "nmap/nmap — nmap-services (8007/tcp ajp12)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ],
  "ianaName": "warppipe"
}