Use nmap or simply look at the login page title. ZTE routers often leak the model number in the HTML <title> tag.
To prevent your router from being vulnerable to these wordlist-based attacks:
If you own a ZTE router:
When a sticker on the router isn't accessible, security researchers often use wordlists based on known ZTE generation algorithms: Serial Number Logic