scanner.hefes.net

If you are seeing connections from this address in your logs, they come from the Hefes Scan service operated by Hefes LLC.

What we do

We run automated, non-intrusive external security scans — port and service discovery, TLS configuration checks, HTTP header checks and signature-based checks for known issues — only against domains whose owners have proven control of the domain — by a DNS TXT record, a verification meta tag on the site itself, or a file at /.well-known/hefes-verify.txt — and have explicitly authorised the scan. The proof is checked again immediately before each scan runs, and the scan is abandoned if it no longer holds.

What we never do

No exploitation, no credential guessing, no denial-of-service, no authenticated testing, and no scanning of hosts other than the verified domain and the addresses it resolves to.

Seeing us and didn't authorise it?

Then one of your users or a party claiming your domain did. Email abuse@hefes.net with your domain or IP and we will stop immediately and tell you who authorised it. Requests to block an IP or range permanently are honoured.

User-Agent on HTTP requests: HefesScan/x.y (+https://scanner.hefes.net)