service IP ranges

Official IP ranges for 66 services, one page per service, straight from each vendor's own publication. Ranges render live from the signed feed; changes land in the changelog. Services that do not publish ranges are listed in the catalog.

A service can publish addresses for either direction, and many publish both. 38 publish the addresses your workloads connect out to. 53 publish the addresses that connect in to yours, which is what a webhook receiver or a monitoring probe needs.

AI

Anthropicoutbound: api · inbound: crawlers, outbound OpenAIinbound: adsbot, agents, chatgpt-user, connectors, gptbot, searchbot

Business SaaS

Atlassian Cloudinbound: egress · both ways: all, bitbucket DocuSigninbound: connect-webhooks, email HubSpotinbound: api, crawlers, dns, email Makeinbound: platform Microsoft 365outbound: common, exchange, sharepoint, teams Oracle NetSuite Connectorinbound: connector Salesforceboth ways: all Workatooutbound: on-prem-agent · inbound: platform Zendeskoutbound: api · inbound: webhooks

CDN

Cloudflareboth ways: edge Fastlyboth ways: edge

Cloud

Amazon Web Servicesoutbound: all, cloudfront, dynamodb, s3 · inbound: route53-healthchecks Microsoft Azure (Service Tags)outbound: all, sql, storage DigitalOceanoutbound: all Google (all services)outbound: all Google Cloud Platformoutbound: africa-south1, all, asia-east1, asia-east2, asia-northeast1, asia-northeast2, asia-northeast3, asia-south1, asia-south2, asia-southeast1, asia-southeast2, asia-southeast3, australia-southeast1, australia-southeast2, europe-central2, europe-north1, europe-north2, europe-southwest1, europe-west1, europe-west10, europe-west12, europe-west15, europe-west2, europe-west3, europe-west4, europe-west6, europe-west8, europe-west9, global, me-central1, me-central2, me-west1, northamerica-northeast1, northamerica-northeast2, northamerica-south1, southamerica-east1, southamerica-west1, us-central1, us-central2, us-east1, us-east4, us-east5, us-east7, us-south1, us-west1, us-west2, us-west3, us-west4, us-west8 IBM Cloud (Classic infrastructure)outbound: frontend, load-balancers Akamai Connected Cloud (Linode)outbound: all Oracle Cloud Infrastructureoutbound: all, object-storage Vultr (Constant, AS20473)outbound: all

Communications

Brazeinbound: connected-content Intercominbound: outbound-webhooks · both ways: all, all-eu Klaviyoinbound: integrations PagerDutyinbound: webhooks, webhooks-eu Postmarkoutbound: smtp · inbound: webhooks Twilio Elastic SIP Trunkingboth ways: sip-media, sip-signaling Zoomoutbound: all

Data platforms

Airbyte Cloudinbound: all Databricksoutbound: aws-egress, azure-egress, gcp-egress · inbound: aws-ingress, azure-ingress, gcp-ingress · both ways: all dbt Cloudinbound: all Elastic Cloudoutbound: api · inbound: outbound Fivetraninbound: sync, webhooks Hightouchinbound: all Neon (Serverless Postgres)inbound: outbound

Developer tools

Buildkiteinbound: webhooks CircleCIoutbound: core · inbound: jobs GitHuboutbound: api, git, packages, pages, web · inbound: actions, hooks GitLab.comoutbound: web-api · inbound: webhooks LaunchDarklyoutbound: service · inbound: webhooks Retoolinbound: default-region Svixinbound: webhooks

Identity

Auth0 (Okta CIC)inbound: all, australia, canada, europe, japan, united-kingdom, united-states Cisco Duooutbound: mfa, mfa-australia, mfa-canada, mfa-central-europe, mfa-eu, mfa-india, mfa-japan, mfa-southeast-asia, mfa-uae, mfa-uk, mfa-us, trusted-endpoints Oktaboth ways: all, pam-emea, pam-us, preview-emea, preview-pam, preview-us, production-australia, production-canada, production-germany, production-hipaa, production-india, production-ireland, production-japan, production-us, us-cell-20, us-cell-22 OneLoginoutbound: agents, agents-eu · inbound: email WorkOSinbound: webhooks

Observability

Splunk AppDynamics SaaSinbound: platform-sources, synthetic-agents Checklyinbound: probes Datadogoutbound: agents, agents-eu, api, api-eu, apm, logs · inbound: synthetics, webhooks Grafana Cloudinbound: alerts, logs, metrics New Relicoutbound: agents · inbound: synthetics Pingdominbound: probes Sentry (hosted)outbound: ingest · inbound: uptime, webhooks UptimeRobotinbound: probes

Payments

Braintree (PayPal)outbound: api, sandbox Checkout.cominbound: webhooks PayPalboth ways: all Plaidinbound: webhooks Stripeoutbound: api, terminal · inbound: webhooks Wiseinbound: webhooks, webhooks-sandbox

Security

Netskope (NewEdge)both ways: dataplane Rapid7 (InsightAppSec cloud engines)inbound: appsec-engines Tenable (Vulnerability Management)inbound: scanners Zscaler (zscaler.net cloud)outbound: announced, enforcement-nodes

Does not publish ranges

These vendors state that IP allowlisting is not the supported way to secure the integration. Each page carries their position, the page stating it, and what to use instead.

Adyennot published Aivennot published Akamai (CDN)not published Alibaba Cloudnot published Boxnot published CockroachDB Cloudnot published Confluent Cloudnot published crates.ionot published Docker Hub / Docker Desktopnot published Dynatrace (Synthetic Monitoring)not published Honeycombnot published JumpCloudnot published Mailchimp Transactional (Mandrill) webhooksnot published Mailgunnot published Maven Central (repo1.maven.org)not published MongoDB Atlas (data plane)not published Netlify (function egress)not published Oracle NetSuite (platform)not published npm registry (registry.npmjs.org)not published OpenAI API (api.openai.com)not published Palo Alto Networks Prisma Accessnot published PlanetScalenot published PyPI (pypi.org, files.pythonhosted.org)not published Redis Cloudnot published RubyGems (rubygems.org)not published SendGrid (webhooks/parse)not published Shopify (webhooks)not published Slacknot published Snowflakenot published Snyknot published Splunk Cloud Platformnot published Square (webhooks)not published Stytch (webhooks)not published Sumo Logicnot published Supabasenot published Twilio (REST API + webhooks)not published Vercel (function egress)not published Zapiernot published