I understand that port 8009 is opened to allow for the downloading of
the FortiClient software. But my Fortigate appears to be exposing
several hundred IP addresses on Shodan on port 8009. I wouldn't be
surprised if it was just showing a single IP op...