ZoomEye finds 115,944 Gitea servers exposed online

A ZoomEye scan on September 26, 2026 found 115,944 fingerprint matches for Gitea and 119,972 title matches, with 66,857 instances answering on the default port 3000. Self-hosted Git services hold code, CI secrets and internal docs, making exposed instances a leak risk.

• Fingerprint query returned 115,944 Gitea matches; title query 119,972
• 66,857 instances are reachable on the default port 3000
• Open registration and repo visibility are the main risks
• CI variables often store deployment credentials