Tag archive
How to triage vulnerabilities in ubiquitous web server software when global ZoomEye counts are too large to act on directly.
Scoping Estonia’s Public-Sector Attack Surface After September’s DDoS Wave
What 5,034 public Ceph titles measure, and why the dashboard's key authority is a larger risk than an exposed bucket.
Jackrabbit WebDAV Surfaces: 2,254 Body Matches Against 237 Titles
SOCKS exposure measures 4,740,002 answers on port 1080 against 805,832 confirmed service matches, a gap that shows what each field observes.
How large the exposed Memcached population is, what an unauthenticated cache leaks, and how to narrow a global count to an actionable list.
What a reachable annotation service exposes: source data, labels and the bulk export function.
What ZoomEye's Kestra fingerprint counts do and do not tell you, and how to use an external exposure baseline as a discovery prompt rather than a risk score.
Measuring internet-facing collaboration platform exposure with ZoomEye and why extension patching matters as much as core.
A ZoomEye comparison of ports 102, 502 and 44818 that explains why the three industrial protocol counts should not be summed.
ZoomEye observed 177 hosts answering on port 2375, the unencrypted Docker API. Why a small exposure count can carry more risk than a large one.
ZoomEye returned 5,037 application matches and 3,146 title matches for Ignition on 2026-10-07. The article covers the role of the gateway and practical hardening.