Why ranges instead of single IP addresses?

Datadog operates a large, changing fleet of synthetics runners and therefore publishes CIDR blocks instead of individual addresses. Firewalls accept CIDR notation directly, so you can paste the ranges as-is.

How often do the Datadog ranges change?

The ip-ranges.datadoghq.com feed carries a modified timestamp and is the canonical source. Datadog recommends consuming it programmatically — re-sync periodically or automate it.

Does Datadog Synthetics use IPv6?

The synthetics section of the official feed currently lists IPv4 ranges. Check the feed for current IPv6 coverage before relying on it.

Do I need the other sections of the feed too?

Only the "synthetics" section is monitoring traffic that hits your site. Webhooks, agents, and API sections cover other Datadog products — whitelist them separately only if you use those features.

Should I whitelist these IPs on my origin server or my CDN/WAF?

Both — wherever requests can be blocked. If your site sits behind a CDN or WAF (Cloudflare, AWS WAF, Akamai…), add an allow/skip rule there so probes are never challenged; if your origin firewall also filters traffic, whitelist them there too. A single missed layer is enough to cause false alerts.

How do I keep this whitelist up to date automatically?

Most providers expose a machine-readable source (linked above). Fetch it on a schedule — a small cron job that pulls the list and updates your firewall ruleset — instead of hardcoding addresses by hand. This page is re-verified against the official source regularly, but automation on your side is the most reliable option.

Does whitelisting these IPs make my site less secure?

No. Allow-listing only exempts known monitoring addresses from blocking and rate-limiting rules — it grants no access beyond what your site already serves publicly, and authentication, authorization, and TLS are unchanged. You are simply telling your firewall "these are not attackers".

What is the difference between whitelisting and blocking here?

A blocklist keeps known-bad addresses out; an allow/whitelist makes sure known-good addresses — here, the monitoring probes — never end up caught in a block or rate-limit rule. The two coexist: you keep blocking attackers while explicitly exempting the probes.

Datadog Synthetics: IPs & Locations

Verified Datadog Synthetics IP Addresses. Copy-Paste Firewall-Setups.

Every official Datadog Synthetics monitoring IP—verified in real-time against the canonical source, featuring ready-to-use firewall templates. Stop false downtime alerts caused by blocked checking nodes on your infrastructure.

Start Your Free Trial Uptimeify IP-List

Made and Hosted in the

European Union

GDPR-Compliant Hosting

in Germany

GEO-Redundant Replica

across the EU

Three-Step Activation & Frictionless Firewall Alignment

Bring your perimeter security rules up to date in three simple steps. Our production-ready configuration templates for common server architectures eliminate fragmented routing filters and costly check flapping.

Copy Complete IP Bundles

113 IPv4 ranges — one click below copies everything as a plain list or as ready-to-paste UFW, nginx, or Apache config.

Authorize Firewall & WAF Layers

Add every address to your allow list — UFW, nginx, Apache, or a Cloudflare/WAF skip rule. Partial lists cause flapping checks and false alerts.

Re-Sync Periodically

Datadog Synthetics updates its list occasionally. This page was verified on 2026-06-12 against the official source — re-check after unexplained alerts or automate the sync.

Official Datadog Synthetics Monitoring IPs

Datadog publishes all egress ranges machine-readable at ip-ranges.datadoghq.com — synthetic monitoring traffic is the "synthetics" section.

Datadog Synthetics runs API tests and browser tests from Datadog-managed locations around the world. The egress addresses are published as CIDR ranges in the official ip-ranges feed — if your firewall, WAF, or rate limiter blocks them, synthetic tests fail with errors your real users never see.

Whitelist the ranges below exactly as listed: every common firewall (UFW, nginx, Apache, cloud security groups) accepts CIDR notation directly.

This list contains 113 IPv4 ranges, verified against the official source on 2026-06-12.

IPv4 addresses 113

3.1.36.99/32
3.1.219.207/32
3.18.172.189/32
3.18.188.104/32
3.18.197.0/32
3.35.66.96/32
3.36.177.119/32
3.40.2.64/29
3.40.134.72/29
3.41.0.88/29
3.41.176.48/29
3.42.136.80/29
3.44.192.120/29
3.45.0.40/29
3.92.150.182/32
3.96.7.126/32
3.120.223.25/32
3.121.24.234/32
5.60.130.112/29
13.48.150.244/32
13.48.239.118/32
13.48.254.37/32
13.54.169.48/32
13.114.211.96/32
13.115.46.213/32
13.126.169.175/32
13.208.126.217/32
13.208.133.55/32
13.208.142.17/32
13.208.255.200/32
13.209.118.42/32
13.209.230.111/32
13.234.54.8/32
13.236.246.161/32
13.238.14.57/32
13.244.85.86/32
13.244.188.203/32
13.245.194.43/32
13.245.200.254/32
13.246.172.210/32
13.247.164.9/32
15.152.238.192/32
15.161.86.71/32
15.165.240.116/32
15.168.188.85/32
15.184.139.182/32
15.185.189.82/32
15.188.202.64/32
15.188.240.172/32
15.188.243.248/32
16.24.38.13/32
16.24.60.114/32
16.162.136.62/32
16.163.153.45/32
18.96.16.112/29
18.96.130.96/29
18.96.227.72/29
18.97.147.8/29
18.98.67.176/29
18.98.96.240/29
18.98.131.24/29
18.98.196.216/29
18.99.4.112/29
18.99.34.208/29
18.99.99.232/29
18.99.147.8/29
18.99.209.96/29
18.99.224.56/29
18.102.80.189/32
18.130.113.168/32
18.139.52.173/32
18.163.21.55/32
18.163.59.106/32
18.166.19.255/32
18.195.155.52/32
18.200.120.237/32
18.229.28.50/32
18.229.36.120/32
20.62.248.141/32
20.83.144.189/32
34.48.76.208/29
34.94.234.88/29
34.145.82.128/29
34.146.154.144/29
34.159.50.128/29
34.174.98.16/29
34.208.32.189/32
35.152.76.8/32
35.154.93.182/32
35.176.195.46/32
35.177.43.250/32
40.76.107.170/32
43.198.123.228/32
43.203.72.233/32
43.218.5.202/32
52.9.13.199/32
52.9.139.134/32
52.35.61.232/32
52.55.56.26/32
52.60.189.53/32
52.67.95.251/32
52.89.221.151/32
52.186.167.216/29
52.192.175.207/32
54.177.155.33/32
63.34.100.178/32
63.35.33.198/32
99.79.87.237/32
107.21.25.247/32
108.137.133.223/32
108.137.188.57/32
157.241.36.106/32
157.241.93.102/32

Last verified: 2026-06-12

Official source: https://ip-ranges.datadoghq.com/

Whitelisting Datadog Synthetics-Monitoring IPs

Pick a format — the block below contains the complete config for every address in the list above. The plain list is also available as a .txt download.

ufw allow from 3.1.36.99/32
ufw allow from 3.1.219.207/32
ufw allow from 3.18.172.189/32
ufw allow from 3.18.188.104/32
ufw allow from 3.18.197.0/32
ufw allow from 3.35.66.96/32
ufw allow from 3.36.177.119/32
ufw allow from 3.40.2.64/29
ufw allow from 3.40.134.72/29
ufw allow from 3.41.0.88/29
ufw allow from 3.41.176.48/29
ufw allow from 3.42.136.80/29
ufw allow from 3.44.192.120/29
ufw allow from 3.45.0.40/29
ufw allow from 3.92.150.182/32
ufw allow from 3.96.7.126/32
ufw allow from 3.120.223.25/32
ufw allow from 3.121.24.234/32
ufw allow from 5.60.130.112/29
ufw allow from 13.48.150.244/32
ufw allow from 13.48.239.118/32
ufw allow from 13.48.254.37/32
ufw allow from 13.54.169.48/32
ufw allow from 13.114.211.96/32
ufw allow from 13.115.46.213/32
ufw allow from 13.126.169.175/32
ufw allow from 13.208.126.217/32
ufw allow from 13.208.133.55/32
ufw allow from 13.208.142.17/32
ufw allow from 13.208.255.200/32
ufw allow from 13.209.118.42/32
ufw allow from 13.209.230.111/32
ufw allow from 13.234.54.8/32
ufw allow from 13.236.246.161/32
ufw allow from 13.238.14.57/32
ufw allow from 13.244.85.86/32
ufw allow from 13.244.188.203/32
ufw allow from 13.245.194.43/32
ufw allow from 13.245.200.254/32
ufw allow from 13.246.172.210/32
ufw allow from 13.247.164.9/32
ufw allow from 15.152.238.192/32
ufw allow from 15.161.86.71/32
ufw allow from 15.165.240.116/32
ufw allow from 15.168.188.85/32
ufw allow from 15.184.139.182/32
ufw allow from 15.185.189.82/32
ufw allow from 15.188.202.64/32
ufw allow from 15.188.240.172/32
ufw allow from 15.188.243.248/32
ufw allow from 16.24.38.13/32
ufw allow from 16.24.60.114/32
ufw allow from 16.162.136.62/32
ufw allow from 16.163.153.45/32
ufw allow from 18.96.16.112/29
ufw allow from 18.96.130.96/29
ufw allow from 18.96.227.72/29
ufw allow from 18.97.147.8/29
ufw allow from 18.98.67.176/29
ufw allow from 18.98.96.240/29
ufw allow from 18.98.131.24/29
ufw allow from 18.98.196.216/29
ufw allow from 18.99.4.112/29
ufw allow from 18.99.34.208/29
ufw allow from 18.99.99.232/29
ufw allow from 18.99.147.8/29
ufw allow from 18.99.209.96/29
ufw allow from 18.99.224.56/29
ufw allow from 18.102.80.189/32
ufw allow from 18.130.113.168/32
ufw allow from 18.139.52.173/32
ufw allow from 18.163.21.55/32
ufw allow from 18.163.59.106/32
ufw allow from 18.166.19.255/32
ufw allow from 18.195.155.52/32
ufw allow from 18.200.120.237/32
ufw allow from 18.229.28.50/32
ufw allow from 18.229.36.120/32
ufw allow from 20.62.248.141/32
ufw allow from 20.83.144.189/32
ufw allow from 34.48.76.208/29
ufw allow from 34.94.234.88/29
ufw allow from 34.145.82.128/29
ufw allow from 34.146.154.144/29
ufw allow from 34.159.50.128/29
ufw allow from 34.174.98.16/29
ufw allow from 34.208.32.189/32
ufw allow from 35.152.76.8/32
ufw allow from 35.154.93.182/32
ufw allow from 35.176.195.46/32
ufw allow from 35.177.43.250/32
ufw allow from 40.76.107.170/32
ufw allow from 43.198.123.228/32
ufw allow from 43.203.72.233/32
ufw allow from 43.218.5.202/32
ufw allow from 52.9.13.199/32
ufw allow from 52.9.139.134/32
ufw allow from 52.35.61.232/32
ufw allow from 52.55.56.26/32
ufw allow from 52.60.189.53/32
ufw allow from 52.67.95.251/32
ufw allow from 52.89.221.151/32
ufw allow from 52.186.167.216/29
ufw allow from 52.192.175.207/32
ufw allow from 54.177.155.33/32
ufw allow from 63.34.100.178/32
ufw allow from 63.35.33.198/32
ufw allow from 99.79.87.237/32
ufw allow from 107.21.25.247/32
ufw allow from 108.137.133.223/32
ufw allow from 108.137.188.57/32
ufw allow from 157.241.36.106/32
ufw allow from 157.241.93.102/32

Cloudflare / WAF: create an IP Access Rule (or custom WAF skip rule) with action Allow for the addresses above, so bot fight mode and managed challenges never block probe traffic.

Whitelisting only exempts these addresses from blocking and rate-limiting rules — it grants no access beyond what your site already serves publicly.

FAQ

Frequently Asked Questions

The IP addresses on this page belong to Datadog Synthetics and are published by Datadog Synthetics for whitelisting purposes. List verified on 2026-06-12 against the official source. Always cross-check with the official documentation before locking down production firewalls. All product names and trademarks are the property of their respective owners; Uptimeify is not affiliated with Datadog Synthetics. Uptimeify's own worker IPs are published at /ips.txt; a feature comparison is on our comparison page.

Monitoring Without IP Guesswork.

Protect your clients' digital assets and lock down your webserver routing. Leverage our verified network catalogs for clean whitelist setups, or migrate directly to the rock-solid, EU-only architecture of Uptimeify.

Start Your Free Trial