About this bot
Expanse is associated with Expanse / Palo Alto Networks and used for internet attack surface scanning.
The primary claimed User-Agent token is Expanse. Representative request identity: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet..
Directory status: Active. Identity classification: Verified with Medium confidence. Identity type: verified-bot.
robots.txt is not a reliable control for this traffic.
Scans public IPv4 infrastructure for external attack-surface and asset discovery.
How to identify this bot
- User-agent and crawler identifiers
-
ExpanseExpanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. - Also known as
- Palo Alto Networks Expanse
Details
- Kind
- Scanner
- Family
- Expanse / Palo Alto Networks
- Purpose
- Internet attack surface scanning
- Common Use
- Scans public IPv4 infrastructure for external attack-surface and asset discovery.
- Respects robots.txt
- No
Verification
- Identity Type
- Verified bot
- Evidence Method
- Match the distinctive Expanse/Palo Alto Networks scanner identity; network attribution can further corroborate origin.
- Detection Notes
- Match the distinctive Expanse/Palo Alto Networks scanner identity; network attribution can further corroborate origin.
Website controls
- Robots.txt Snippet
# robots.txt is not a reliable control for this identity; use application, firewall, or request-level policy if restriction is required.- Apache Rule
RewriteCond %{HTTP_USER_AGENT} "Expanse" [NC]- Nginx Rule
if ($http_user_agent ~* "Expanse") { return 403; }