scanner.codewall.ai
Security Scanner Disclosure
This page explains who operates this scanner, why it exists, and how to contact us if you have concerns.
Scanner IP allowlist — scanner.codewall.ai
- 209.38.170.234London (lon1)
- 188.166.134.209Amsterdam (ams3)
- 129.212.194.135Frankfurt (fra1)
- 168.144.12.133New York (nyc1)
These are the only IPs CodeWall scans originate from. Any of the four may appear depending on which region your run is dispatched to.
What is this?
CodeWall operates a regional fleet of automated security scanners (scanner.codewall.ai). Each scan run launches from a dedicated reserved IP in one of four regions — London, Amsterdam, Frankfurt, or New York — listed below. We do not egress from dynamically-allocated cloud IPs; if traffic from any other IP claims to be CodeWall, it isn't us. Our scanners are used exclusively to conduct authorised penetration tests on behalf of customers — organisations that have engaged CodeWall to test their own infrastructure.
Why did you scan my systems?
If you received traffic from any of the IPs listed above, it is most likely because you operate infrastructure that belongs to, or is associated with, one of our customers. All scans are conducted under a signed agreement with the asset owner. If you believe you received traffic in error, please contact us immediately.
What do you scan for?
Our agent performs standard penetration testing activities: port scanning, service enumeration, web application testing, and vulnerability identification. It operates within a defined scope agreed with the customer and does not attempt destructive actions.
How do I opt out or report an issue?
Email security@codewall.ai with your IP range or domain. We will add you to our exclusion list and investigate any reports of out-of-scope activity. We aim to respond within one business day.