52,068 SonarQube pages on 9000, 12,052 fingerprints, and the tokens that sit in the project settings

SonarQube is a code analysis platform. Teams connect it to a source repository, it pulls the code, analyses it and reports on quality and security findings. To do that it stores credentials: repository tokens, CI webhook secrets, and in many installs the integration tokens that let the pipeline push analysis results.

Port 9000 is SonarQube's default and is also one of the most crowded ports on the internet, because every tool with a web interface that needed a port picked a round number. A count on that port is a count of a neighbourhood.

The measurements

Requested from ZoomEye through the vendor SDK on 26 October 2026, one record per query, scope all asset types.…