Added pen tester IP addresses to allowed list