408,924 Proxmox Fingerprints and 957,581 Portainer Titles Describe Two Kinds of Management Exposure

Virtualisation hosts and container management interfaces protect the same thing: everything running above them. They are found in completely different ways, and the gap between their counts is a lesson in fingerprint quality.

ZoomEye measurements collected on 28 October 2026 show 408,924 assets matching app="Proxmox" . For Portainer the same day, app="Portainer" returns 4 and title="Portainer" returns 957,581, with title="Portainer" && port="9443" at 235,601.

Why one number is four and the other is a million

An app fingerprint is a claim about software identity. It looks for a response that could not plausibly come from anything else, and it is maintained deliberately. Four assets matching app="Portainer" almost certainly means the signature is not matching current Portainer builds, not that four Portainer instances exist on the internet.…