Callback Source IP Addresses
Environment: Live
Allow incoming payment callbacks from Moolre by adding its callback source IP addresses to your server's allowlist.
# Callback Source IP Addresses
Allow incoming payment callbacks from Moolre by adding its callback source IP addresses to your server's allowlist.
## Overview
Use this list when configuring access to your payment callback endpoint. Allowlist all the IPv4 and IPv6 addresses below.
These are Moolre's source IP addresses for incoming payment notifications. For outgoing disbursement requests, whitelist your own server's public IP address in the relevant API Service instead.
## Callback Source IP Addresses
To help verify that incoming payment callbacks originate from Moolre, add the IP addresses listed below to your server's allowlist.
Moolre sends payment callbacks from these IP addresses. Allowlisting them helps protect your callback endpoint by restricting requests to approved sources.
| Version | Source address |
| --- | --- |
| IPv4 | `174.138.44.22` |
| IPv4 | `174.138.40.67` |
| IPv4 | `192.241.135.134` |
| IPv6 | `2604:a880:400:d1:0:3:4cf0:c001` |
| IPv6 | `2604:a880:400:d0::1a77:4001` |
| IPv6 | `2604:a880:400:d0::4234:2001` |
**Security Note:** IP allowlisting adds an extra layer of security but should not be your only method of verification. Always validate the callback secret, verify the transaction details, and use HTTPS to secure callback communication.
## Related documentation
- [Payment Webhook: payloads and callback handling](https://docs.moolre.com/api/payments/webhook)
- [IP Whitelisting for Disbursements](https://docs.moolre.com/guides/ip-whitelisting-for-disbursements)