ZoomEye finds 12,241 LXD hosts and 15 Incus hosts exposed online

A ZoomEye scan dated October 28, 2026 returned 12,241 hosts matching the LXD signature, with 11,685 answering on port 8443, where the administrative HTTPS API listens by default. The Incus fork returned just 15 app-signature matches but 359 page-title matches.

• Query app="LXD" returned 12,241 hosts, 11,685 of them on port 8443
• For Incus, app="Incus" returned 15 hosts and title="Incus" 359
• Port 8443 serves the admin API, which allows code execution on the host
• The counts do not show whether certificate or token auth is enforced