ZoomEye Scan Finds 4.1 Million Hosts Exposing Port 6443

A ZoomEye scan on September 20, 2026 found 4,138,087 hosts responding on port 6443, the default kube-apiserver port. The figure reflects public exposure, not vulnerable or compromised clusters, as no authentication tests were run.

• Query port="6443" returned 4,138,087 matching hosts on 2026-09-20
• Port 6443 is a convention, not a guarantee: false positives and clusters on 443 possible
• Exposure is not vulnerability: authentication and configuration were not checked
• Risk comes from default security groups with 0.0.0.0/0 and self-managed clusters