ZoomEye Finds 127,120 ClickHouse Hosts Exposed Online

ZoomEye scans from 28 October 2026 found 127,120 assets matching app="ClickHouse" and 1,031 matching the title fingerprint. Researchers warn the default user account is used whenever no username is specified and often stays passwordless and reachable from outside.

• ZoomEye: 127,120 assets match app="ClickHouse", 1,031 match title
• The default account is used when no username is specified
• Default user needs access_management and named_collection_control enabled manually
• Risk comes from open native port, passwordless default and stored data