# zmap/zmap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

Repository: https://github.com/zmap/zmap
Canonical: https://ross.abutalabs.com/products/zmap
Homepage: https://zmap.io
Language: C
License: Apache-2.0
License Family: permissive
Topics: research, internet-measurement, internet-scanning, port-scanner
Last push: 2026-08-26T15:13:42+00:00

## Health v2 (maintenance only)
Score: 90/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 74, longevity 100
- inputs: {"age_days": 4971, "days_push": 7, "days_rel": 96, "gap_med": 49, "n_releases_24m": 6}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 6366, forks 986 (observed 2026-08-28T04:09:42.863205+00:00)

## What it is
ZMap is a fast, stateless single-packet network scanner written in C, designed for Internet-wide network surveys such as scanning the entire IPv4 address space on one port in under 45 minutes. It supports TCP SYN, ICMP, DNS, UPnP, BACNET, and UDP probe modules, and pairs with ZGrab2 for stateful application-layer scans.

## Use cases
- scan the entire IPv4 address space on a single port
- find hosts running a specific service like SMTP on port 25
- perform Internet-wide network security surveys
- measure adoption of protocols or services across the public Internet
- quickly identify open ports across large IP ranges
- research Internet measurement at scale

## When to choose
- you need to scan millions of IPs quickly on a single port
- you are doing Internet-wide research or measurement studies
- you want a stateless scanner that maximizes scan throughput
- you plan to pair fast discovery with ZGrab2 for banner grabs or handshakes

## When to avoid
- you need stateful application-layer interactions like banner grabbing or TLS handshakes (use ZGrab2)
- you only need to scan a small internal network (nmap is more appropriate)
- you cannot operate within ethical and legal scanning constraints

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, penetration-testing, cli
- domain: security, networking, developer-tools
- platform: bsd, cli
- tags: port-scanner, internet-scanning, network-survey, internet-measurement, single-packet-scanner, research, linux, macos

## Member repositories
- zmap/zmap (main) score 90

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:42.863205+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:45:13.730957+00:00, confidence not recorded.
  - readme: https://github.com/zmap/zmap (fetched 2026-08-28T04:09:42.863205+00:00, sha 50bd30ee52ce)
  - homepage: https://zmap.io (fetched 2026-08-29T08:42:12.854052+00:00, sha 3a1f2905a0fa)
  - site_page: https://zmap.io/about (fetched 2026-08-29T08:42:12.856695+00:00, sha 03b05040b05d)
- Data as of 2026-08-30T08:39:29.467469+00:00.