ZoomEye finds 116,010 exposed Gitea instances on the public internet

A ZoomEye API scan on 29 September 2026 returned 116,010 matches for the app="Gitea" fingerprint and 120,024 for the title="Gitea" HTML title. Publicly reachable forges hold source code, deploy keys, tokens and webhook secrets, and often act as single sign-on for internal tools.

• 116,010 matches for app="Gitea", 120,024 for title="Gitea"
• An exposed forge holds code, SSH deploy keys, tokens and webhook secrets
• A Gitea account often doubles as SSO for internal tools
• The scan shows neither version, open registration, nor private repo access