ZoomEye
ZoomEye. Is a cyberspace search engine from Knownsec’s 404 Team.
Summary
What it is: Continuous Internet scanner plus search UI, API, and official Python SDK (ZoomEye-python). Supports host (v4/v6) and web search modes, dork-style filters, facets, and exports.
When to use:
- Fill gaps that Western indexes miss in Chinese or Asian IP space
- Compare results across engines after M&A or cloud expansion into APAC
- Integrate via API or CLI in authorized pipelines
- Pair with tools like Nuclei that support ZoomEye as an uncover engine
When to skip: Teams that have already standardized on one Western index. Investigations where query logging under Chinese jurisdiction is unacceptable OPSEC. Needs already covered entirely by Shodan without APAC-specific gaps. Orgs that forbid third-party recon data.
API: freemium web tier with tight daily search limits on free accounts. Paid plans and API keys unlock programmatic search, larger page sizes, and automation.
Details
| Use case | Notes |
|---|---|
| Regional asset discovery | country:"CN" and related filters for APAC exposure |
| Service hunting | port:, app:, service:, device: dorks |
| Web exposure | sub_type:web for crawled sites and components |
| Version/CVE context | ver: and product filters after advisories drop |
| Automation | Official SDK, CLI, and third-party wrappers |
Data sovereignty: Knownsec operates ZoomEye in China. Queries are logged. Treat sensitive hunts accordingly.
Ethics and policy: only query assets you own or have written permission to assess. Pair external recon with internal Shift Left scanning.
Alternatives: Shodan remains our default global index. Censys leads on certificate pivots and enterprise ASM. Use ZoomEye when APAC coverage or a second opinion matters.
References