zgrab is the application-layer scanner from the ZMap project, used in internet-wide measurement studies and security research. Traffic typically originates from academic scans, Censys/Shodan-style indexers, or adversarial reconnaissance.

At a glance

Operator: zgrab
Type: Security

How Centinel checks it

User agent: The request calls itself this crawler. Anyone can send the same string.

zgrab publishes nothing Centinel can check a source against, so a match reports the name and leaves the source unconfirmed. The match tokens, verification domains, and address feeds are not published here.

Allowing or blocking it

The crawler object in the /validate response sets access_allowed to true only for a verified source that your tenant allowlists. A policy rule can allow or block this crawler by its category, Security.

Back to the crawler catalog