Product Introduction

Product Overview

Purchase Guide

Billing Overview

Purchase Methods

Renewal Policies

Overdue Payment ‍Policies

Refund Policies

Getting Started

Operation Guide

Access Permissions Management

Multi-Cloud Multi-Account Management

Vulnerability and Risk Center

Alarm Center

Log Shipping

Managing Assets

Health Checks

Cloud API Exception Monitoring

User Behavior Analytics (UEBA)

Report Download

API Documentation

History

Introduction

API Category

Making API Requests

Multi-account management related APIs

Scan Task APIs

Risk Center APIs

Asset Center APIs

Cloud Boundary Analysis APIs

Cloud API Anomaly Detection APIs

Report Download APIs

Solid Protection APIs

Cloud Security Center Overview APIs

Data Types

Error Codes

Related Protocol,

Service Level Agreement

FAQs

Glossary

Adding IPs to an Allowlist

PDF

Modo Foco

Tamanho da Fonte

Última atualização: 2025-04-29 10:30:25

This document will provide you with a detailed guide on how to add Tencent CSC's monitoring IP to the allowlist.
Operation scenarios
CSC uses simulated hacker intrusion attacks for public network asset discovery and risk monitoring. If your server is equipped with security protection or monitoring deployment (such as WAF), it's recommended to add Tencent Cloud CSC's monitoring IP to the allowlist, enabling scan access permission to ensure the normal operation of the monitoring service. CSC scanning node IPs are:
211.162.110
211.162.87
211.163.253
211.164.19
211.166.123
211.167.182
211.167.200
211.167.70
211.162.158
211.162.23
211.166.134
211.167.108
211.167.181
211.166.142
211.166.163
211.167.128
211.167.166
139.244.231
139.243.246
28.101.45
28.101.51
109.12.53
226.197.194
226.197.196
226.197.199
226.197.200
226.197.201
226.197.204
226.197.205
226.197.207
226.197.209
226.197.21
134.229.58
33.220.146
254.192.73
178.79.94
55.172.224
91.226.99
139.53.159
55.100.23
53.104.226
207.45.218
136.98.102
139.150.105
178.22.156
152.222.70
75.140.45
112.176.100
136.103.134
33.244.20
132.180.83
75.80.121
136.56.35
52.219.11
193.249.24
136.123.68
207.72.172
139.233.146
91.227.203
178.108.10
136.85.179
230.104.109
91.226.24 
91.48.196
33.203.139
175.222.22
178.72.188
178.90.4
29.244.62
207.72.179
178.79.108
230.243.60
138.175.184
175.53.125
139.204.202
152.233.202
178.176.234
139.244.105
139.188.254
75.154.2
52.244.65
138.233.4
75.110.155
175.248.145
If your website requires log in to access, you must first lift the security policy (i.e., ensure all IPs can access), and then reinstate the restriction once your cookie validity verification passes. 
Operation step
Note
Applicable for Tencent Cloud WAF. If you're using another WAF product, please add it yourself.
Purchased  WAF .
You have added a protected domain name and connected it normally. The domain name is under normal protection, and the BOT management rules are enabled. For details, see Quick Start.
Method 1: allow IPs through IP query
Log in to the WAF Console, and in the left sidebar, click IP Lookup.
On the IP Query page, select the domain name to be protected in the upper left corner, enter the IP to be queried, and click Search.
﻿
In the query results, you can view the specific IP details, and click Add to blocklist/ allowlist  to manually add to the blocklist.
﻿
On the add to blocklist/allowlist page, you can manually add to the allowlist. Configure the relevant parameters and click Add to complete adding to the allowlist.
﻿
Parameter description:
Category: Select Allowlist.
IP Address: Enter the address to be added to the allowlist.
Expire Time: Enter the expiration time for the allowlist.
Remarks: Custom description.
Method 2: add IPs directly to the allowlist
Log in to the WAF Console, and in the left sidebar, click Configuration Center > Blocklist, select the domain to be protected in the upper left corner, and click IP Allowlist to enter the IP allowlist page.
Manually add to the allowlist
On the IP allowlist page, click Add address to enter the add to allowlist page.
﻿
On the add to allowlist page, configure the relevant parameters, and click OK.
﻿
Field description
IP address:Supports any IP address, such as 10.0.0.10 or FF05::B5; supports CIDR format addresses, such as 10.0.0.0/16 or FF05:B5::/60. Use line breaks for separation, up to 20 entries at a time.
Note
When selecting the domain name as ALL, the added IP addresses or ranges will be a global allowlist.
The domain name quotas in each edition are as follows: Premium Edition: 1,000 entries/domain name; Enterprise Edition: 5,000 entries/domain name; Ultimate Edition: 20,000 entries/domain. Each IP address or range occupies one entry in the quota.
Validity: Permanent or Expiration time.
Remarks: Custom, within 50 characters.
Batch import allowlist
On the IP allowlist page, click Import data, and the "Import IP List" window will pop up.
In the "Import IP List" window, click Import, select the allowlist file to import, and after the upload is complete, click OK.
﻿
Method 3: Add blocked IP to the allowlist
Log in to the WAF Console, and on the left sidebar, select IP Inquiry > Block Query.
On the Block Query page, enter the relevant information, click Search to query the relevant IPs of CSC, and then proceed with the whitelist operation for the blocked IPs.
﻿