This article applies to:

• Trustwave external vulnerability scans

Purpose:

This page documents the IP addresses used to originate Trustwave external vulnerability scans.

• This information applies worldwide to all applicable customers. 
• Services that utilize these scanners include PCI compliance validation through PCI Manager* and Trustwave Vulnerability Manager.

Information:

Most common Trustwave external vulnerability scans (EVS) originate from the following range of IP addresses:  

64.37.231.0/24 (64.37.231.1 through 64.37.231.254)

Please note that for certain compliance requirements, such as PCI DSS, interference with a vulnerability scanner may result in an inconclusive scan and thus a Fail score.  Active protection systems like intrusion prevention systems (such as IDS, IPS or WAFs) could interfere with vulnerability scanners.  Additionally, it is required that all stated scan target hosts are detectable by Trustwave to ensure a complete scan. As such, Trustwave scanner IP(s) may need to be whitelisted for the duration of the scan.  Learn more about host detection and whitelisting.

Less common Trustwave external vulnerability scans (EVS) originate from the following IP addresses:

• 111.108.90.138 through 111.108.90.139 - Tokyo, Japan
• 124.211.46.74 through 124.211.46.75 - Osaka, Japan
• 204.225.91.58 through 204.225.91.59 - Toronto, Canada
• 209.90.139.122 through 209.90.139.123 - London, Canada
• 220.101.105.8 through 220.101.105.9 - Sydney, Australia
• 220.101.107.8 through 220.101.107.9 - Melbourne, Australia

Trustwave reserves the right to make changes at any time without notification. This page will be updated with changes as required.

* Note: The name of the PCI compliance tool for certain bank-sponsored programs may be different.