Authorized vulnerability and attack-surface scanning
Scanning, monitoring & defensive infrastructure
IPv4 for Cybersecurity Infrastructure
Use dedicated IPv4 ranges for authorized security scanning, monitoring, threat research, synthetic checks, and defensive infrastructure.
What this page covers
Security platforms may need dedicated egress for authorized scanning, attack-surface monitoring, threat research, synthetic checks, sinkholes, or customer-isolated collectors. The key requirement is authorization and accountability for the traffic each address generates.
Best fit
When this option makes sense.
Size address space around the network you actually operate, then leave deliberate room for growth and operational separation.
Threat intelligence, monitoring, honeypots, and defensive research
Security SaaS platforms that need customer-isolated or region-specific egress
Plan the deployment
Make authorization visible in the architecture
Keep documented scope for scans, customer authorization, opt-out handling where appropriate, source identification, and contact information. Dedicated prefixes can make defensive traffic easier for third parties to recognize and for your team to trace.
Route it deliberately
Separate noisy scanners from customer production traffic
Security probes can trigger rate limits and automated defenses even when authorized. Isolating scanner pools from APIs, dashboards, and customer-facing services reduces the chance that one workload damages another’s reputation.
Operate it well
Use routing controls to protect the prefix
Keep RPKI, IRR, origin-AS policy, and monitoring aligned with the intended deployment. A security company should be especially deliberate about route authorization and unexpected announcements.
Lease operations
Infrastructure around the prefix matters too.
Exact support depends on address family, prefix, registry, and deployment. Confirm the final order details before routing production traffic.
Same-day LOA
Authorization is normally emailed during sales hours after payment and order checks.
WHOIS / SWIP
Company details and updates are included for eligible /24 and larger allocations.
Geolocation updates
Request a city and country when ordering or through a support ticket.
IRR & RPKI / ROA
Route objects and origin authorizations through ARIN or RIPE where supported by the block.
Reverse DNS
Delegate reverse DNS to your nameservers or request hosted PTR records. The published minimum is /24.
Optional rotation
The published option costs $25 per /24 per month. Confirm suitability and availability with sales.
Keep the use attributable and policy-compliant.Leased address space remains subject to LogicWeb’s IP Leasing Policy and Acceptable Use Policy. Larger pools increase the importance of customer attribution, complaint handling, and clean routing records.Read the IP Leasing Policy
Before you order
Common questions.
Can I use leased IPv4 for vulnerability scanning?
Only for authorized, lawful activity within the applicable policies. Do not scan systems outside your authorization or use the service to facilitate intrusion.
Why dedicate IPs to security scanners?
Dedicated ranges improve attribution, allowlisting, reputation isolation, customer communication, and routing control.
Can I publish contact information for a scanner range?
WHOIS/SWIP and reverse DNS can help identify the operator. Your application can also serve an explanatory page or contact endpoint associated with the scanner.
From planning to production
Need address space for this workload?
LogicWeb publishes IPv4 /24 through /18 and IPv6 /48, /32, and /29 lease options with routing and registry support.