ZoomEye finds 24,511 exposed HDFS web interfaces

A ZoomEye scan on 2026-09-28 found 24,511 assets with a confirmed HDFS fingerprint and 1,602,200 answers on port 9870. The exposed NameNode interface reveals the filesystem namespace, DataNode list and administrative operations such as safe mode.

• 24,511 assets positively fingerprinted as HDFS on the internet
• Port 9870 returns 1,602,200 matching systems
• NameNode UI exposes namespace, DataNode list and capacity
• Unauthenticated safe mode access is a DoS primitive