For website owners
ScanDefendBot: who we are,and how to opt out.
Seen it in your logs? A ScanDefend customer asked us to check your website's public security signals.
ScanDefendBot/1.0 (+https://scandefend.com/bot)
In short
A polite, named scanner.Read-only by design.
It reads your public homepage and the files it links to, a few standard public files like robots.txt and security.txt, and your public DNS records.
-
Who we are
ScanDefendBot is the website checker used by ScanDefend, run by IronSky Limited (Ireland).
-
It names itself
Every request carries the User-Agent shown above.
-
Light and read-only
A small number of polite requests to your public homepage and the files it links to, a few standard public files like robots.txt and security.txt, and your public DNS records.
-
Stays on the public surface
Public pages only: no logins, forms or hidden files.
Where we send from
Fixed addresses.Easy to recognise.
ScanDefendBot's website requests come from these IPv4 addresses.
- 18.203.64.25
Updated 2026-10-20. Machine-readable list · Let ScanDefend in
Opt out
Opt out a domain.Blocked from checkout straight away.
Opted-out domains are kept out of checkout, so no one can order a scan of them. The block starts as soon as you send the form, and a person reviews the request within 24 hours.
Questions about our scanner? Email abuse@scandefend.com with your domain and the rough time of the requests.
About the checks
What our scanner looks at.Public signals only, explained.
- What we check Every check in a Quick Scan, one page each.
- How it works From a website address to a report you can act on.
Also useful: About ScanDefend Contact Let ScanDefend in