Allowlisting WCH IP Addresses

When you need this

Some servers only accept connections from approved IP addresses. This is called an allowlist (or whitelist). If your deployment destination has one, add the WCH addresses below. Otherwise WCH cannot deliver your site.

This applies to destinations where WCH connects to your server, for example SFTP or an endpoint that receives your project.zip.

Current WCH production addresses

IP address	Purpose
34.201.143.28	WCH production server
100.58.226.164	WCH production server

Last checked: October 22, 2026.

Add every address in the list. WCH can send from any of them.

How to add the addresses

The steps depend on your server or firewall. In general:

1. Open your firewall, security group, or hosting control panel.
2. Add an inbound rule for each address above.
3. Allow only the port your destination uses, for example 22 for SFTP or 443 for HTTPS.
4. Save the rule.

Use a single-address rule, such as 34.201.143.28/32. Do not allow a wider range.

Testing your changes

1. Publish your site to staging.
2. Publish to your destination from the Dashboard.
3. Open Project Logs with View logs and confirm there are no connection errors.

Troubleshooting

• Deploying via SFTP failed or a connection timeout: the address WCH used may be missing from your allowlist. Compare your rules with the list above.
• It worked before and stopped after a WCH update: the addresses changed. Update your allowlist from this page.

For other messages, see Publish errors and troubleshooting.