Airwallex website scanner

Learn how the Airwallex website scanner accesses customer websites, how to identify its requests, and how to manage its access.

Copy for LLMView as Markdown

The Airwallex website scanner is an automated tool that collects information from publicly accessible pages on websites submitted to Airwallex. Understanding when and how the scanner runs helps you recognize scanner traffic on a customer website and avoid blocking the information Airwallex needs to complete compliance checks.

Airwallex uses scanner results to provide services to customers, assess website-related risk, and meet financial regulations. The scanner only accesses public pages and is designed to limit impact on site performance and availability.

Pages the scanner visits

A scan typically starts with the submitted homepage and can access a small number of related pages on the same website, such as:

About us pages
Terms and conditions
Privacy policies
Shipping and refund policies
Other legal or business-information pages

Which pages are visited depends on the website and the purpose of the scan. The scanner does not attempt to access private network addresses or content that requires user credentials.

Scanner requests

Identify scanner traffic by source IP address. The scanner uses a Chromium browser user agent, which is not unique to Airwallex.

Production scanner IP addresses

Production scanner requests originate from the following IP addresses:

35.240.218.67
34.87.64.173
35.185.179.53
34.177.101.131
34.143.140.106
34.158.57.211
34.124.183.136
34.126.131.52
34.21.185.174
34.142.140.136

To verify a scanner request, compare the source IP address in server logs with this list. A matching IP address means the request came from Airwallex infrastructure.

Note

Airwallex might update this list when its infrastructure changes. Use the addresses on this page as the current production list.

Access controls

The scanner only accesses pages that are publicly available without signing in. Airwallex does not guarantee support for access rules that target a scanner user agent.

You can use standard website access controls to prevent unauthenticated access to sensitive content. Keep confidential, personal, and security-sensitive information off publicly accessible pages.

Blocking automated access can prevent Airwallex from collecting the information required to provide a service or complete a review. Airwallex might then request additional information.

Website traffic

The scanner limits the number of pages selected during a typical scan. Actual traffic can vary because loading a webpage can also request scripts, stylesheets, images, and other resources referenced by that page.

If scanner activity appears to affect your website's availability or performance, contact your Airwallex Account Manager or Airwallex Support. Include the affected domain, the approximate time of the requests, and relevant server logs.