👁
z1b eye
Internet-wide Threat Intelligence Scanner
This host is part of z1b eye, an Internet-wide scanner operated for
threat intelligence purposes. We search for
malicious servers, C2 infrastructure and malware distribution points
across the public Internet.
What we do
We perform passive service discovery: we connect to publicly reachable
ports, read service banners and standard protocol handshakes (HTTP, TLS, SSH),
and catalogue the results for security researchers.
The data helps identify command&control servers, phishing panels and hosts
that serve malware.
What we do NOT do
- ✓ We do not attack your systems.
- ✓ We do not brute-force passwords or credentials.
- ✓ We do not exploit vulnerabilities — no payloads are ever sent.
- ✓ We do not send spam and do not crawl web content.
All traffic consists of standard TCP connections and
normal protocol handshakes — the same packets any ordinary client would send.
Opt-out
If you would like your network to be excluded from our scans, or you have
questions about traffic you observed from our hosts, contact us at
abuse@z1b.top — include the affected
IP addresses or CIDR ranges and we will add them to our exclude list
promptly.