You don't want to be scanned
Write to us from an address on your domain: we block scans of your site as soon as it arrives, and answer within 24 hours. For anything else (too many requests, a mistake on our side), same address.
Spotted Rustine in your logs?
Someone ran a scan of your site with Rustine. Here's what we did, and how to stop us if you'd rather we didn't.
How to recognize us
- IP address
- 34.155.18.250
- User-Agent
- RustineScanner/0.1 (+https://rustine.io/scanner)
- From
- Google Cloud, Paris (europe-west9)
What the scanner does
WITHOUT PROOF
What a visitor would see
Your home page, headers, certificate, public JavaScript and a few well-known files (.env, .git). Reads only: 5 requests a second at most, 500 in all, 30 seconds.
WITH PROOF
Deeper tests, read-only
Only when the domain's owner has proved it's theirs (DNS, file or tag), checked again right before. Never writing or changing anything: 5 requests a second at most, 2,500 in all, 10 minutes.
NEVER
What we don't do
No attack, no password tried, no load to take your site down, no data changed. Secrets we find are masked before they're stored.
Answer within 24 hours, in English or French.