ZoomEye finds 49,691 exposed HAProxy instances online

ZoomEye's index recorded 49,691 fingerprint matches for HAProxy as of September 23, 2026. A match does not prove a vulnerability, but it shows that statistics pages and runtime APIs of many load balancers may be reachable from the internet.

• ZoomEye recorded 49,691 matches for the app="HAProxy" fingerprint
• Data was collected from the index on September 23, 2026
• Exposed statistics pages reveal backend state and internal server names
• Statistics and runtime API should be restricted to management networks