Monitoring traffic from Vigilbase

What this traffic is

Vigilbase monitors websites on behalf of its customers. Requests only reach sites that a Vigilbase customer has asked us to monitor. There are two kinds:

• Uptime checks: one request for a single page, about once a minute from each monitoring region. User agent contains Vigilbase-Monitoring/1.0.
• Watchdog security scans: a small set of checks for TLS, security headers, DNS and accidentally exposed files (for example /.env). Exposed-file checks run at most once a day. User agent: Vigilbase-Watchdog/1.0. Scans run on Cloudflare Workers and have no fixed source addresses, so identify them by user agent.

Uptime probe IP addresses

This list is generated from the probes themselves and updates within minutes when an address changes. For firewall allowlists, import monitoring-ips.txt (one address per line) or monitoring-ips.json rather than copying addresses by hand.

Blocking or reducing this traffic

Blocking these addresses makes the affected region report your site as down to the Vigilbase customer who monitors it. If the traffic is causing a problem, or you did not expect it, email security@vigilbase.com with your domain and we will adjust or stop the checks. See also our vulnerability disclosure policy.