ZoomEye: 8.7M JBoss servers exposed on the internet
ZoomEye scans on 26 September 2026 found 8,741,336 hosts matching JBoss, 1,335,265 matching WebLogic and 285,121 matching WildFly. These are internet-reachable Java application servers, many of them long-lived deployments that were never renamed or replaced.
- JBoss: 8,741,336 matches; WebLogic: 1,335,265; WildFly: 285,121
- Counts collected via the ZoomEye API on 26 September 2026
- The JBoss-WildFly gap points to long-lived, unrenamed deployments
- Exposed management consoles, not the servers themselves, drive the risk
Read next
Security