English

IP Addresses for Domain Scanning

Aikido uses dedicated IP addresses to perform scanning of your domains (DAST). To prevent connectivity issues, rate limiting, or security blocks, add these IPs to your firewall’s allowlist or other security software. After this, rescan your domains to confirm connectivity.

Looking for Aikido Pentest IP addresses? They are listed on IP Addresses for Pentest.

To use 'Fetch OpenAPI by URL', you must also add the Code & Container scanning IP addresses.

Which IPs should you allowlist?

Domain scanning traffic comes from the region where your Aikido workspace is hosted, not from the region where your application runs. Check the URL you use to log in to Aikido, then allowlist that region's IPs:

Aikido URLRegionIP list
app.aikido.devEUEU-based IP addresses
app.us.aikido.devUSUS-based IP addresses
app.aikidogov.usFedRAMPFedRAMP IP addresses
app.au.aikido.devAUAU-based IP addresses
app.me.aikido.devMEME-based IP addresses

If you log in at app.aikido.dev, scanning uses EU IPs, even when your endpoints are hosted in the US. Allowlisting only US IPs in that case will cause scans to fail.

If you log in at app.aikidogov.us, scanning uses FedRAMP IPs. Commercial US IPs (app.us.aikido.dev) will not work for FedRAMP workspaces.

IP Addresses

EU-based IP addresses (app.aikido.dev)

  • 3.248.4.169
  • 54.76.211.68
  • 54.228.156.63
  • 54.247.155.164
  • 18.200.152.99
  • 18.202.99.112

US-based IP addresses (app.us.aikido.dev)

  • 98.85.190.95
  • 52.204.144.1
  • 44.209.56.130
  • 18.210.114.117
  • 35.168.38.209
  • 35.173.56.162
  • 54.227.161.94
  • 44.209.154.183

FedRAMP IP addresses (app.aikidogov.us)

  • 16.65.244.192
  • 16.65.77.60

ME-based IP addresses (app.me.aikido.dev)

  • 158.252.118.40
  • 158.252.52.197
  • 40.172.160.56

AU-based IP addresses (app.au.aikido.dev)

  • 54.66.103.236
  • 52.65.129.204

Optional IP addresses

Used for troubleshooting with support.

  • 79.127.239.171

Request Headers

All HTTP requests originating from Aikido scans (except for Front-end scans) include a specific User-Agent header. This can be used to identify the DAST traffic or for allowlisting purposes:

  • User-Agent: aikido-scan-agent/1.0

For instructions on whitelisting IP addresses with third-party providers, refer to the following resources:

The IP address lists are also available as JSON arrays