# Callback Source IP Addresses

Allow incoming payment callbacks from Moolre by adding its callback source IP addresses to your server's allowlist.

## Overview

Use this list when configuring access to your payment callback endpoint. Allowlist all the IPv4 and IPv6 addresses below.

These are Moolre's source IP addresses for incoming payment notifications. For outgoing disbursement requests, whitelist your own server's public IP address in the relevant API Service instead.

## Callback Source IP Addresses

To help verify that incoming payment callbacks originate from Moolre, add the IP addresses listed below to your server's allowlist.

Moolre sends payment callbacks from these IP addresses. Allowlisting them helps protect your callback endpoint by restricting requests to approved sources.

| Version | Source address |
| --- | --- |
| IPv4 | `174.138.44.22` |
| IPv4 | `174.138.40.67` |
| IPv4 | `192.241.135.134` |
| IPv6 | `2604:a880:400:d1:0:3:4cf0:c001` |
| IPv6 | `2604:a880:400:d0::1a77:4001` |
| IPv6 | `2604:a880:400:d0::4234:2001` |

**Security Note:** IP allowlisting adds an extra layer of security but should not be your only method of verification. Always validate the callback secret, verify the transaction details, and use HTTPS to secure callback communication.

## Related documentation

- [Payment Webhook: payloads and callback handling](https://docs.moolre.com/api/payments/webhook)
- [IP Whitelisting for Disbursements](https://docs.moolre.com/guides/ip-whitelisting-for-disbursements)