Scanner identity
Was your system scanned by VG Scan?
VG Scan assesses internet-facing systems only for customers who have confirmed they own them or are authorised to test them. If you see traffic from the addresses below and did not expect it, tell us and we will stop.
Our scanning addresses
198.51.100.10 198.51.100.11 2001:db8:vg::10
[Replace with the production scanner IPs before launch.]
How to recognise our traffic
- User-Agent
- VGScan/1.0 (+https://[your-domain]/scanner)
- Reverse DNS
- scan-01.[your-domain]
- Activity
- Port discovery, TLS and HTTP header checks, known-vulnerability checks
What we do and don't do
- DoAssess only targets in a customer's confirmed scope and time window
- DoRate-limit requests to avoid disrupting services
- DoLog every scan against a signed authorisation record
- Don'tAttempt exploitation without separate written authorisation
- Don'tRun denial-of-service or brute-force tests
- Don'tStore data beyond the evidence needed for the finding
Report unwanted scanning
Email abuse@[your-domain] or use this form. We respond within [X hours] and can block your ranges permanently.