ZoomEye: Dozzle and SigNoz fingerprints undercount exposed hosts by 20–80x

ZoomEye queries run on 28 October 2026 returned 592 hosts for app="Dozzle" versus 11,918 for title="Dozzle", and 32 versus 2,640 for SigNoz. Both observability tools are widely deployed but poorly fingerprinted, and open instances expose logs and telemetry without any vulnerability.

• Dozzle: 592 hosts by app fingerprint vs 11,918 by title
• SigNoz: 32 hosts by app fingerprint vs 2,640 by title
• An open Dozzle streams logs with tokens and database connection strings
• Unauthenticated SigNoz exposes traces and metrics from all services