Scanners & probes

zgrab

Operator unknownmedium confidence

ZGrab/ZGrab2 is an open-source application-layer scanner from the ZMap project for Internet-wide surveys; its default UA (e.g. 'Mozilla/5.0 zgrab/0.x') is sent by academics, scan indexers and attackers alike.

Dossier

Operator: unknown
Documentation: None published
robots.txt token: None documented
Feeds: security scan, research
Follows robots.txt: Not documentedGeneric tool; no robots.txt behaviour; the UA identifies the tool, not the operator.
How to verify: No published method
Names in our logs: zgrab
Researched: 23 Oct 2026

Observed on New Runtime

Baseline 2026-10-23 · 93-day window · loading live numbers…

Requests: 638
Days active: 86 / 93
First seen: 23 Jul 2026
Last seen: 23 Oct 2026

Regularscanner

Daily requests across the observed window, square-root scale.

Identity check claimed vs verified

No per-family identity check is published for this reader; its name is a claim.

What it reads crawler journeys · current window

The crawler-journeys aggregate tracks reading depth for the busiest named crawlers only; this family is not among them.

Sources

github.comgithub.com/zmap/zgrab2
docs.centinelanalytica.comdocs.centinelanalytica.com/crawlers/zgrab