About the Scanylo scanner

What you will see in your logs

Every request carries this User-Agent, which names us and points here:

Scanylo/1.0 (+https://scanylo.com/scanner)

A check makes at most about 150 requests, with at most 4 at once, using GET or HEAD only. Most are for your home page and a short fixed list of well-known file addresses. We do not guess addresses from word lists, send attack data, log in or change anything.

Where requests come from

Requests come from these IP addresses only:

5.75.235.21

If you see our User-Agent from any other address, it is not us. Please tell us at [email protected].

Why was my site checked?

Someone typed your address into Scanylo and confirmed that they own the site or are authorised to check it. This is often you, your developer or your agency. We keep a record of that confirmation. If it was not authorised, tell us and we will look into it.

How to opt out

Use the opt-out form to add your domain to our do-not-scan list. The list is checked in our code before any request is sent, so nobody can scan it through Scanylo afterwards.

You can also block our User-Agent or the IP addresses above at your firewall. That works immediately but will not stop us trying, so the form is the dependable way.

Reporting abuse

If you think we have misbehaved, write to [email protected] with the time of the requests and the address they hit. We read every message.