BeaconBot

If you saw BeaconBot/1.0 in your logs, this page explains what it is and how to make it stop.

What it does

BeaconBot is operated by Ascendant Finance. It notices newly launched or relaunched websites through public signals (Certificate Transparency logs, newly registered domain lists, and public DNS) and records what is publicly observable about them.

For a domain it has not been invited to watch, BeaconBot makes at most one visit every seven days. That visit consists of:

• /robots.txt, fetched first and honoured
• /.well-known/security.txt
• one unauthenticated GET / over HTTP (to check for an HTTPS redirect, which is not followed) and one over HTTPS

It never crawls other paths, submits forms, tries logins, scans ports, or pretends to be a browser. It connects only on ports 80 and 443 and backs off on 429 and 503, honouring Retry-After.

How to opt out

Any one of these stops all BeaconBot activity for your domain, including passive lookups, permanently:

1. robots.txt:

   User-agent: BeaconBot
   Disallow: /

2. security.txt: add this line to /.well-known/security.txt:

   Beacon-Opt-Out: true

3. Ask us: write to the contact address below with the domain name. No verification is needed.

Contact

Email beacon@koryo.app.