ZoomEye: 2.16M OpenVPN and 1.23M Ivanti Connect Secure exposed online

A ZoomEye scan on 20 September 2026 found 2,163,654 OpenVPN assets, 1,225,643 Ivanti Connect Secure, 445,720 pfSense and 2,508,736 SonicWall devices reachable from the internet. The researchers note that reachability is by design for this class, while exposed management interfaces and version banners carry the real risk.

• OpenVPN: 2,163,654 assets; Ivanti Connect Secure: 1,225,643
• pfSense: 445,720; SonicWall: 2,508,736; WatchGuard: 31,255
• Sophos XG Firewall matched only 1,604 fingerprints
• Risk comes from exposed management planes and version banners, not the VPN endpoint itself