Ghostprobe Scanner IPs

Scanner IP addresses

All Ghostprobe testing traffic comes from the address below. We send no testing traffic from anywhere else.

A plain-text list is at ghostprobe.io/ip.txt.

How to check traffic is ours

• It comes from 37.120.167.44.
• Reverse DNS for that address resolves to scanner.ghostprobe.io.
• Requests carry the User-Agent Ghostprobe-Scanner (+https://ghostprobe.io/ip).
• It only reaches non-production Targets in a confirmed Scope, during your testing window.

Seeing traffic from this address that you did not authorise? Email contact@ghostprobe.io straight away. We will stop it and investigate.

Changes

We give at least 30 days' notice by email before adding or replacing an address. In an emergency, such as a compromised server, we will tell you as soon as we can.

How to allowlist Ghostprobe

We only test development and test environments, never production. We recommend allowlisting our address there. Without it, your WAF or bot protection may block some tests, and the Dossier will cover less of your app.

1. Firewall or cloud security group: allow inbound TCP 80 and 443 from 37.120.167.44/32 to your in-scope hosts only. Open other ports only if they are listed in your Scope.
2. Cloudflare: add an IP Access rule with the action Allow for 37.120.167.44. To skip only certain features, create a custom rule on the Security rules page with the expression ip.src eq 37.120.167.44 and the action Skip, then choose rate limiting, managed rules and Super Bot Fight Mode. Bot Fight Mode cannot be skipped by custom rules, but it will not trigger if an IP Access rule matches first (Cloudflare).
3. AWS WAF: create an IP set containing 37.120.167.44/32 and an Allow rule that uses it, with a higher priority (lower number) than your blocking and rate-based rules.
4. Other WAF, CDN or bot tools: add an allow or bypass rule for the address that also covers rate limiting and bot challenges.
5. Your security team: tell them, or your monitoring provider, to expect this traffic during your testing window.
6. After the Job: remove the rule, unless you are on the Continuous plan.

Need help? Email contact@ghostprobe.io.