How to Whitelist Our Agents
If your server uses a firewall, IP allowlist, or rate limiter, you may need to whitelist Chglog's monitoring agents so they can reach your services.
Why whitelist?
Chglog's agents make HTTP requests, DNS queries, and TCP connections from fixed IP addresses. If your firewall blocks unknown IPs, agent requests will be rejected and your checks will show false 'down' alerts.
Finding the IP list
Visit the Agent IP Addresses page for the current list of all agent nodes, their locations, hostnames, and IP addresses.
Firewall examples
iptables (Linux)
iptables -A INPUT -s 159.69.187.170 -j ACCEPT
iptables -A INPUT -s 5.161.68.227 -j ACCEPT
iptables -A INPUT -s 128.199.214.87 -j ACCEPT
ufw (Ubuntu)
ufw allow from 159.69.187.170
ufw allow from 5.161.68.227
ufw allow from 128.199.214.87
AWS Security Group
Add inbound rules for each agent IP on the relevant port (e.g. 443 for HTTPS). Use /32 CIDR notation for individual IPs.
Cloudflare
In Security → WAF → Tools, add each agent IP to the IP Access Rules with action Allow.
Keep the list updated
When we add new agent nodes, we'll update the Agent IP Addresses page. Check back periodically or follow our changelog for announcements.