ZoomEye finds 52,068 SonarQube pages on port 9000

A ZoomEye scan on October 26, 2026 found 52,068 pages titled SonarQube on port 9000 and 12,052 hosts by application fingerprint. Exposed instances store repository tokens and code analysis results, making them valuable targets for attackers.

• Port 9000 serves 7.87M HTTP services, 52,068 of them titled SonarQube
• Application fingerprint yields 12,052 hosts, a conservative floor
• US shows 36,298 title matches versus 3,948 fingerprint matches
• Instances hold project analysis tokens and can influence the quality gate