Add IPs to global whitelist

[imorandin]

Hi,

We noticed that some legitimate services are not included in the global whitelist available at:

https://files.imunify360.com/static/whitelist/v2/

As a result, Imunify360 may classify them as bots and present a CAPTCHA or splash screen, which can break migrations or webhook.
I'd like to suggest adding the following IPs/ranges to the global whitelist.

Migrate Guru

These IPs were identified by us as they don't have a public list but it is a well-known Wordpress plugin:

5.9.68.59
157.90.95.115
157.90.95.102

We currently whitelist them locally with:
imunify360-agent ip-list local add --purpose white 5.9.68.59 --comment "Migrate Guru"
imunify360-agent ip-list local add --purpose white 157.90.95.115 --comment "Migrate Guru"
imunify360-agent ip-list local add --purpose white 157.90.95.102 --comment "Migrate Guru"

Brevo Webhooks

Official published IP ranges: https://help.brevo.com/hc/en-us/articles/15127404548498

1.179.112.0/20
172.246.240.0/20

We currently whitelist them locally with:
imunify360-agent ip-list local add --purpose white 1.179.112.0/20 --comment "Brevo Webhook"
imunify360-agent ip-list local add --purpose white 172.246.240.0/20 --comment "Brevo Webhook"

Hopefully these can be added to the global whitelist so other users don't have to whitelist them manually.

Thanks

[akots]

Hello,

Brought you updates from our WebProtection Team:

• There is no public source for Migrate Guru. The link https://migrate.guru/support/solutio...uru-public-ips is inaccessible, and registration is not available. Migrate Guru shares the same IPs as BlogVault, which we whitelisted in 2024.
• WP plugin Brevo Webhooks IPs have been added to the whitelist.

[akots]

Hi,

Thank you for bringing this to our attention and for providing the IP addresses and the official Brevo reference.

We’ll pass this information to the Imunify360 web-protection team for review. Since entries in the built-in global whitelist bypass the Greylist and Anti-Bot checks for installations using that list, each address or range must be carefully verified before it can be added.

The Brevo webhook ranges are officially documented, so the team can review them based on the provided source. For Migrate Guru, additional verification may be required because there does not appear to be a vendor-published list confirming that these IP addresses are static and used exclusively by the service.

In the meantime, keeping these addresses in the local whitelist is the correct workaround for preventing migrations and webhook requests from being interrupted.

Thank you again for the detailed suggestion.

[akots]

Hello,

Brought you updates from our WebProtection Team:

• There is no public source for Migrate Guru. The link https://migrate.guru/support/solutio...uru-public-ips is inaccessible, and registration is not available. Migrate Guru shares the same IPs as BlogVault, which we whitelisted in 2024.
• WP plugin Brevo Webhooks IPs have been added to the whitelist.