If I remember correctly, the source webtask IPs are the same as those listed in the Rules and Custom DB editors (these things are just code running on webtasks):
http://community.auth0.com/t/where-can-i-find-a-list-of-static-ip-addresses-for-auth0/10797