Identifying PixelHarborBot

This page explains how to identify and whitelist PixelHarborBot in your firewall or security settings.

Recommended: User-Agent Identification

The most reliable way to identify PixelHarborBot is by its User-Agent string:

PixelHarborBot/1.0 (+https://pixelharbor.io/bot)

This User-Agent is consistent across all requests and will not change.

About IP-Based Identification

Note: PixelHarborBot currently uses dynamic IP addresses that change between requests. We do not yet have static IP addresses available for whitelisting.

Our crawler runs on AWS infrastructure in EU (Frankfurt, eu-central-1). The IP addresses come from AWS's public IP pool and may vary.

If your security setup requires static IP whitelisting, contact us and we can discuss options for your specific use case.

How to Whitelist by User-Agent

Cloudflare

  1. Go to Security > WAF > Custom rules
  2. Create a new rule with expression: http.user_agent contains "PixelHarborBot"
  3. Set action to "Skip" and select which security features to bypass

Nginx

# Allow PixelHarborBot to bypass rate limiting
map $http_user_agent $is_pixelharbor {
    ~*PixelHarborBot 1;
    default 0;
}

# In your rate limiting block:
if ($is_pixelharbor) {
    # Skip rate limiting for bot
}

Apache (.htaccess)

# Allow PixelHarborBot
SetEnvIfNoCase User-Agent "PixelHarborBot" allowed_bot

# Example: Skip auth for bot
<RequireAny>
    Require env allowed_bot
    Require valid-user
</RequireAny>

Wordfence (WordPress)

  1. Go to Wordfence > Firewall > Blocking
  2. Under "Whitelisted User-Agents", add PixelHarborBot

AWS WAF

  1. Create a rule with a string match condition
  2. Match on the User-Agent header containing PixelHarborBot
  3. Set the action to Allow
  4. Place the rule before your block rules

Verifying Requests

To verify that a request is genuinely from PixelHarborBot, check for:

  • User-Agent starts with PixelHarborBot/
  • User-Agent contains the URL https://pixelharbor.io/bot
  • The request is for an image file (jpg, png, gif, webp, svg, etc.)

Need Help?

If you're having trouble whitelisting PixelHarborBot or need static IP addresses for your specific security requirements, contact us and we'll help you find a solution.

PixelHarborBot Identification | Pixel Harbor