二、漏洞扫描器 / 攻击工具（99 条）

安全扫描与渗透测试工具。正常站点几乎不应出现这类流量——出现即意味着有人在探测你的漏洞，建议直接封禁并告警。我们特此将证书验证、合规审计、互联网测绘类"温和"安全服务单列供区分处理，毕竟与漏洞扫描器性质不同。表格中的："官方说明"一列保留英文原文描述，避免翻译引入歧义；"匹配正则"可直接用于做访问日志分析或 WAF 拦截规则。

2.1 漏洞扫描 / 渗透攻击工具（81 条）

#匹配正则典型 UA 实例官方说明
1[aA]cunetixMozilla/5.0 (Windows NT 6.1; WOW64) acunetix-product/wvs (Acunetix Web Vulnerability Scanner - Free…Acunetix web vulnerability scanner bot
2[dD]ir[Bb]usterDirBuster-1.0-RC1 (http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project)DirBuster directory scanner web crawler
3abuse\.xmco\.frMozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0 abuse.xmco.frCybersecurity crawler scanning websites for vulnerabilities and threat analysis signals
4air\.ai\/scanningair.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36Air.ai web crawler for scanning
5AliyunSecBotAliyunSecBot/Aliyun AliyunSecBot@service.alibaba.comAlibaba Aliyun security web crawler bot
6ArtemisBotArtemisBotVulnerability scanning and cybersecurity research bot
7Bad Neighborhood Header DetectorBad Neighborhood Header Detector (http://www.bad-neighborhood.com/header_detector.php)Website security risk analysis for link quality
8bitdiscoverybitdiscoverySecurity vulnerability scanner identifying weaknesses and compliance issues in web infrastructure
9BitSightBot\/Mozilla/5.0 (compatible; BitSightBot/1.0)BitSight web crawler for security
10BlackDuck-FDBlackDuck-FDVulnerability scanner for application security testing
11BrowserBot-ObserverBrowserBot-Observer (+https://siteobserver.co)Observer third-party risk security scanner
12CensysInspect\/Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)Censys web crawler for security scanning
13CERT PLMozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)Polish cybersecurity vulnerability and threat scanner
14CISPA WebcrawlerCISPA Webcrawler (https://vuln-notify-checker.cispa.saarland)CISPA web crawler for vulnerability
15Cloudflare-Radar-ScannerCloudflare-Radar-ScannerURL scanning for traffic and threat intelligence
16CloudflareRadarURLScannerMozilla/5.0 (compatible; CloudflareRadarURLScanner; +https://radar.cloudflare.com/)Cloudflare URL security scanner
17cookie-maestroMozilla/5.0 (compatible; cookie-maestro; +https://www.cookiemaestro.com/)Cookie Maestro GDPR compliance scanner
18CookiebotMozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Cookiebot/1…Cookiebot web crawler for cookie scanning
19CookieHubScanMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 S…CookieHub web crawler for cookie scanning
20CookieHubVerifyMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 S…CookieHub consent banner verification scanner
21CookieYesbotMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; CookieYesbot/1.0; …CookieYes consent compliance scanner
22csirt\.czMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36 1.6.4 (+https…Czech cybersecurity team vulnerability scanning bot
23cypex\.ai\/scanningcypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36Cypex security vulnerability scanner
24DetectifyMozilla/5.0 (compatible; Detectify) +https://detectify.com/bot/Vulnerability and attack surface scanning bot
25DigiCert DCVDigiCert DCV/1.1DigiCert domain validation scanner
26DNSScannerDNSScannerDNS and network infrastructure security scanning crawler bot
27Do Not Track VerifierElectronic Frontier Foundation's Do Not Track Verifier (for questions or concerns email dnt-policy@…Privacy practices and security protocol analyzer
28ec2linkfinderec2linkfinderEC2 link finder web crawler bot
29ForegenixMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko, Foregenix) Chrome/…Cybersecurity vulnerability and weakness scanner
30HardenizeMozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.…Hardenize security configuration scanner
31https:\/\/developers\.cloudflare\.com\/security-center\/Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.…CloudFlare security center web crawler
32ISSCyberRiskCrawler\/Mozilla/5.0 (Macintosh; Intel Mac OS X 13_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.…Cybersecurity risk crawler scanning websites for vulnerabilities and exposures
33Jugendschutzprogramm-CrawlerJugendschutzprogramm-Crawler; Info: http://www.jugendschutzprogramm.deJugendschutzprogramm web crawler bot
34K7MLWCBotK7MLWCBot/1.0 (+http://www.k7computing.com)Virus scanner
35Keydrop\.ioMozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);Keydrop gaming marketplace security scanning and monitoring crawler
36l9explorel9explore/1.2.2L9explore web crawler for discovery
37l9scanMozilla/5.0 (l9scan/2.0; +https://github.com/LeakIX/l9scan)L9scan web crawler for scanning
38LegalMonsterLegalMonsterCompliance monitoring scanner detecting cookies and tracking consent
39LightspeedSystemsCrawlerLightspeedSystemsCrawler Mozilla/5.0 (Windows; U; MSIE 9.0; Windows NT 9.0; en-USLightspeed Systems web crawler bot
40ltx71ltx71 - (http://ltx71.com/)LTX71 web crawler for content discovery
41masscanmasscan/1.0 (https://github.com/robertdavidgraham/masscan)Masscan network scanner web crawler bot
42MRGbot\/Mozilla/5.0 (compatible; MRGbot/1.0; +https://www.mrg.ro/bot.html)Security testing lab crawler for anti-fraud control evaluation
43NessusMozilla/5.0 (compatible; Nessus; http://www.nessus.org)Nessus vulnerability scanner web crawler
44Netcraft SSL Server SurveyMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Netcraft SSL Server Survey - contact info@netcra…Netcraft SSL certificate intelligence scanner
45NetSystemsResearchNetSystemsResearch studies the availability of various services across the internet. Our website is…NetSystemsResearch web crawler bot
46NiktoMozilla/5.00 (Nikto/2.1.5) (Evasions:None) (Test:Port Check)Nikto web server security scanner bot
47NINJA botNINJA botNINJA web crawler for content discovery
48Nmap Scripting EngineMozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)Nmap NSE web crawler for security scanning
49NsToolsBot\/NsToolsBot/analyseNetwork and security analysis tool crawler gathering server data
50OpenVASMozilla/5.0 [en] (X11, U; OpenVAS)Vulnerability scanner crawler identifying security weaknesses
51ProbelySPDR\/Mozilla/5.0 (compatible; +https://probely.com/sos) ProbelySPDR/0.1.0Security testing crawler identifying web vulnerabilities
52ProjectShield-UrlCheckMozilla/5.0 (compatible; ProjectShield-UrlCheck; +http://g.co/projectshield)Google DDoS protection bot validating customer origins
53QualysMozilla/5.0 (compatible; Qualys; +https://www.qualys.com/)Qualys security scanning
54ReverseEngineeringBotMozilla/5.0 (compatible; ReverseEngineeringBot/0.1; +https://torus.company/bot.html)Torus reverse engineering web crawler
55Riddler \(http:\/\/riddler\.ioRiddler (http://riddler.io/about)Internet scanning crawler gathering domain and IP metadata
56SafeDNSBotSafeDNSBot (https://www.safedns.com/searchbot)SafeDNS web crawler for security analysis
57Sansec Security Monitor\/Mozilla/5.0 (compatible; Sansec Security Monitor/1.0; +https://sansec.io/monitor)E-commerce malware detection scanner for skimmers
58SecurityHeadersMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 S…HTTP security headers analyzer and evaluator
59Software-Security-ResearchMozilla/5.0 (compatible; Software-Security-Research; +https://www.ruhr-uni-bochum.de/)Ruhr University CDN security research crawler
60sqlmapsqlmap/1.7.8#stable (https://sqlmap.org)SQLMap SQL injection testing web crawler
61SSL Labs$SSL LabsQualys SSL Labs scanner testing TLS configuration and certificate grades
62SucuriMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 MSIE 7.0; Sucu…Security scanner identifying malware blacklist status and checking plugin vulnerability compliance
63TestcrawlerTestcrawlerTesting crawler evaluating website performance security vulnerabilities and SEO optimization
64TLS testerTLS tester from https://testssl.sh/SSL/TLS security testing and vulnerability scanning crawler bot
65TwinWaveScannerTwinWaveScannerSecurity threat analysis and phishing detection bot
66Unshorten\.It\!Unshorten.It!/1.0 (https://unshorten.it/)URL expansion crawler revealing shortened link destinations for cybersecurity threat intelligence
67UrlBeeBotUrlBeeBotURL analysis and threat detection security crawler bot
68UT-DorkbotUT-Dorkbot/1.0University of Texas security web crawler
69VaultPressVaultPressWordPress backup and security scanner performing malware scanning and integrity
70VerispiderMozilla/5.0 (compatible; Verispider; +https://www.projecthoneypot.org/)Verispider spam and security scanner
71virustotalMozilla/5.0 (Windows; U; MSIE 9.0; Windows NT 9.0; en-US) AppEngine-Google; (+http://code.google.co…VirusTotal web crawler for security
72visionheight\.com\/scanvisionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36Vision Height security scanner
73WanscannerBotMozilla/5.0 (X11; Linux x86_64; WanscannerBot/1.2; +https://abuse.pend.re) Gecko/20100101 Firefox/1…Network security scanning and vulnerability detection crawler bot
74watchTowrMozilla/5.0 (watchTowr; Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0watchTowr is an external attack surface management tool that scans assets and generates findings against thos…
75WhatWeb\/WhatWeb/0.5.5Web technology scanner identifying frameworks servers and CMS configurations
76WPScanWPScan v3.8.22 (https://wpscan.com/wordpress-security-scanner)WPScan WordPress security scanner bot
77WPSec\/Mozilla/5.0 (compatible; WPSec/1.3; +https://wpsec.com)WordPress security scanner identifying vulnerabilities outdated plugins and misconfigurations
78WTotemMozilla/5.0 (compatible; WTotem; +https://www.webtotem.com/)WTotem malware detection scanner
79YahooMailProxyYahooMailProxy; https://help.yahoo.com/kb/yahoo-mail-proxy-SLN28749.htmlEmail proxy crawler fetching URLs and resources for security scanning and rendering
80zgrabMozilla/5.0 zgrab/0.xZgrab web crawler for security scanning
81ZmEuZmEuZmEu vulnerability scanner web crawler

2.2 安全测绘 / 证书验证 / 合规审计类（建议放行或观察）（18 条）

#匹配正则典型 UA 实例官方说明
1AkismetBotAkismetBotSpam filtering service for WordPress and CMS
2asnriskscorerasnriskscorer/1.0ASN Risk Scorer web crawler bot
3CertChiefMozilla/5.0 (compatible; CertChief; +https://www.certchief.com/)CertChief SSL certificate monitoring bot
4Cloudflare-SSLDetectorCloudflare-SSLDetectorCloudFlare SSL detector web crawler
5CookieHub BotCookieHub BotCookie consent and privacy compliance auditor
6CyberPatrolCyberPatrol SiteCat Webbot (http://www.cyberpatrol.com/cyberpatrolcrawler.asp)CyberPatrol web content filtering bot
7DratabotDratabot (+https://dratabot.com)Compliance automation crawler auditing security controls and documentation
8ExpanseExpanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day…Palo Alto Networks Expanse bot for internet asset discovery
9Feed Image AuditFeed Image Audit -- AppImage validation and compliance auditing
10filterdb\.iss\.net\/crawlerMozilla/5.0 (compatible; oBot/2.3.1; +http://filterdb.iss.net/crawler/)ISS filter database web crawler
11Google-Trust-Services\/Mozilla/5.0 (compatible; Google-Trust-Services/2.0; http://pki.goog/)Google PKI service validating SSL certificates and checking revocation status
12hstspreload-bothstspreload-botHSTS preload list checker verifying HTTPS enforcement across websites
13HTTP Banner DetectionHTTP Banner Detection (https://security.ipip.net)IPIP HTTP banner detection web crawler
14iubenda-radar\/iubenda-radar/2.25.2Compliance platform crawler auditing privacy policies and cookie consent
15Let's EncryptMozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)SSL certificate validation bot verifying domain control for TLS certs
16NetcraftSurveyAgentMozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)Netcraft survey web crawler bot
17SSL Labs \(https:\/\/www\.ssllabs\.comSSL Labs (https://www.ssllabs.com/about/assessment.html)TLS certificate and encryption configuration analyzer
18Test Certificate InfoTest Certificate InfoSSL TLS certificate analyzer assessing website security encryption and expiration status

Copyright © 2026 24KRMB.COM.All rights reserved.