IP Addresses for Inclusion on Allowlists in Marketing Cloud Engagement

Note This information is subject to change. We recommend that you check this list quarterly for new IP ranges.

Add these addresses to your allowlists based on the instance of your Marketing Cloud Engagement account. To determine if your account uses a dedicated IP, contact Salesforce Customer Support. For information about adding dedicated IP addresses to your account, contact your Salesforce account executive.

Required Domains

If you have policies that allow only Marketing Cloud Engagement domains, include these domains so that you receive all content from Marketing Cloud Engagement.

All Instances for Tenant-Specific Endpoints Users

All users can add these IP addresses to allowlists regardless of which Marketing Cloud Engagement instance their tenant is hosted on. These IP addresses allow traffic for tenant-specific Engagement endpoints that are assigned to your tenant. You don’t have to change any previously allowlisted IP addresses.

IP Addresses for Authentication API Calls

• 198.245.89.215
• 198.245.89.230
• 68.232.201.176
• 13.111.7.83
• 13.111.95.26
• 13.111.18.57
• 68.232.201.185
• 198.245.89.238
• 198.245.89.240
• 13.111.7.92
• 13.111.95.45
• 13.111.95.47
• 13.111.18.82
• 13.111.67.58
• 13.110.204.28
• 96.43.154.30
• 161.71.33.239
• 159.92.152.26

IP Addresses for REST API Calls

• 198.245.89.216
• 198.245.89.231
• 161.71.33.240
• 68.232.201.177
• 13.111.7.84
• 13.111.95.27
• 13.111.18.58
• 68.232.201.186
• 198.245.89.239
• 13.111.7.93
• 13.111.95.46
• 13.111.95.48
• 13.111.18.83
• 13.111.67.59
• 13.110.204.29
• 96.43.154.31
• 159.92.152.27

IP Addresses for SOAP API Calls

• 68.232.201.179
• 198.245.89.218
• 198.245.89.233
• 161.71.33.234
• 13.111.7.86
• 13.111.95.29
• 13.111.18.60
• 13.111.67.53
• 13.110.204.43
• 96.43.154.35
• 161.71.33.234
• 159.92.152.41

IP Addresses for FTP Integrations

• 68.232.201.173
• 198.245.89.212
• 198.245.89.227
• 159.92.152.23
• 161.71.33.231
• 13.111.7.80
• 13.111.95.23
• 13.111.18.54
• 13.111.67.50
• 13.110.204.24
• 96.43.154.27

IP Addresses for Device Integrations

• 68.232.201.178
• 198.245.89.217
• 198.245.89.232
• 13.111.7.85
• 13.111.95.28
• 13.111.18.59

IP Addresses for WhatsApp Integrations

• 54.155.83.128
• 54.78.194.39
• 54.76.19.159

Instance-Specific IP Addresses

Marketing Cloud Engagement accounts use a pool of IP addresses that vary depending on send volume by default. You can configure an Engagement account to use a dedicated IP address, often with private domains. If your account uses a dedicated IP address, add it to your allowlist. Otherwise, allowlist these addresses based on the instance of your Engagement account. To determine if your account uses a dedicated IP address, contact Salesforce Customer Support. For information about adding dedicated IP addresses, contact your account executive.

Note All EMEA tenants use the S50 instance. All data for those tenants use EMEA-based servers only.

S1 (AMER)

• 207.67.38.30
• 207.67.38.42
• 207.250.68.26
• 207.67.38.26–27
• 207.67.38.29
• 66.231.83.109
• 66.231.85.170
• 66.231.85.201
• 66.231.93.184
• 66.231.92.253
• 136.147.181.105–110
• 13.111.30.229–232
• 13.111.39.251–253
• 206.246.157.1
• 68.232.203.24–31
• 13.111.250.0–15
• 198.245.82.66-68

S4 (AMER)

• 68.232.199.1
• 68.232.192.104–106
• 68.232.192.153
• 68.232.193.193
• 68.232.192.196
• 68.232.192.198
• 198.245.88.98
• 199.122.127.251
• 13.111.11.213–316
• 136.147.137.252–254
• 66.231.94.250
• 199.122.126.144–151
• 13.111.251.0–15
• 68.232.202.41-42

S6 (AMER)

• 68.232.200.1
• 68.232.200.2
• 68.232.200.250
• 68.232.200.3
• 207.67.38.42
• 198.245.87.251
• 13.111.27.193–196
• 13.111.27.239–241
• 68.232.203.57
• 68.232.203.17–22
• 13.111.250.16–31
• 198.245.82.66-68

S7 (AMER)

• 136.147.131.11–18
• 13.111.28.188–192
• 13.111.24.210–214
• 13.111.29.241–244
• 13.111.65.250–252
• 136.147.128.1–14
• 13.111.82.0–31
• 136.147.129.210

S10 (AMER)

• 13.111.19.65–78
• 13.111.19.82–83
• 13.111.19.212–215
• 13.111.112.246–248
• 13.111.17.4–14
• 13.111.17.49
• 13.111.17.34–38

S11 (AMER)

• 13.111.105.65–79
• 13.111.156.145–149
• 13.111.66.0–13

S12 (AMER)

• 13.110.208.0/24
• 13.110.210.190–197
• 13.110.209.10–15
• 13.110.211.206–213
• 13.110.209.7–8
• 13.110.230.96–105
• 13.110.234.222–231
• 13.110.208.5–15

S13 (AMER)

• 128.245.242.1–15
• 128.245.248.210–229
• 96.43.155.5–15

S50 (EMEA)

• 161.71.34.65–79
• 161.71.67.172–179
• 161.71.69.112
• 161.71.66.27
• 161.71.65.176
• 161.71.32.5–15

S51 (EMEA)

• 159.92.156.5–15
• 159.92.157.1–15

Intelligence Reports for Engagements

Use these domains and IP addresses for Marketing Cloud Intelligence reports inclusion.

Required Domains

• *.datorama.com
• *.datorama-res.com
• db.onlinewebfonts.com
• data.pendo.io

IP Addresses

• 54.163.226.11 (US)
• 54.83.10.143 (US)
• 54.227.219.146 (US)
• 35.157.8.65 (EU)
• 54.93.174.35 (EU)

Notification and Identity Validation Emails

IP Addresses for multi-factor authentication (MFA)

To permit MFA verification communications for your tenant, place these addresses on your mail exchange allowlist regardless of instance.

• 13.111.157.253
• 13.111.171.210–211

Global Support IP Addresses

To receive emails from Salesforce Customer Support, add these IP addresses to your mail exchange allowlist.

• 96.43.144.64–65
• 96.43.148.64–65
• 182.50.78.64–79
• 204.14.232.64–79
• 204.14.234.64–79

Standard Email Reply Mail Management Notification

Accounts that use custom RMM settings with a Sender Profile using the forward triggered send setting don’t need to allowlist these IP addresses.

Other IP Addresses for Integrations and External Access

Add these IP addresses to your allowlists only if you meet one of these criteria.

• You use software or applications that integrate with Marketing Cloud Engagement.
• You require external access from our application to perform remote calls on customer resources.
• You can perform remote file transfers, pull in email lists, or remotely fetch web content.

S1

For webservice.exacttarget.com as part of Marketing Cloud Engagement.

• 66.231.91.118
• 68.232.201.179

For rest.s1.exacttarget.com service as part of Marketing Cloud Engagement.

• 66.231.91.244

For Enterprise 2.0 and cloud connector as part of Marketing Cloud Engagement.

• 66.231.91.251

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 66.231.91.46

For webservice-auth.exacttarget.com as part of Marketing Cloud Engagement.

• 66.231.91.216

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 13.111.250.0–15

S4 (Including Production)

For webservice.s4.exacttarget.com as part of Marketing Cloud Engagement.

• 66.231.94.116
• 198.245.89.218

For rest.s4.exacttarget.com service as part of Marketing Cloud Engagement.

• 66.231.94.227

For Enterprise 2.0 as part of Marketing Cloud Engagement.

• 66.231.94.247
• 68.232.204.9

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 66.231.94.106

For Marketing Cloud Engagement for Microsoft Dynamics CRM integration.

Note The Microsoft Dynamics CRM integration was retired in October 2021. See Marketing Cloud MSCRM Retirement.

• 13.111.250.1–14
• 66.231.94.190
• 206.246.157.1
• 206.246.157.6

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 66.231.94.1–254

S6

For webservice.s6.exacttarget.com as part of Marketing Cloud Engagement.

• 68.232.203.67
• 13.111.7.86

For Enterprise 2.0 as part of Marketing Cloud Engagement.

• 68.232.203.56–63
• 68.232.202.16–23
• 68.232.203.87

For the authentication of web services as part of Marketing Cloud Engagement.

• 68.232.203.88

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 68.232.203.1–254

S7

For webservice.s7.exacttarget.com as part of Marketing Cloud Engagement.

• 136.147.129.33
• 13.111.95.29

Asynchronous Web Service API endpoint

• 136.147.129.33

Salesforce Marketing Cloud Engagement Connector web service API endpoint

• 136.147.129.15
• 136.147.129.69

Salesforce integration endpoint

• 136.147.129.15

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 136.147.129.16

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 136.147.128.1–254

S10

For webservice.s10.exacttarget.com as part of Marketing Cloud Engagement.

• 13.111.18.33
• 13.111.18.60

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 13.111.18.54

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 13.111.17.4–14

S11

For SOAP as part of Marketing Cloud Engagement.

• 13.111.67.53

For REST service as part of Marketing Cloud Engagement.

• 13.111.67.59

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 13.111.67.50

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 13.111.66.0–254

S12

For SOAP as part of Marketing Cloud Engagement.

• 13.110.204.43

For REST service as part of Marketing Cloud Engagement.

• 13.110.204.29

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 13.110.204.24

For outbound communication, such as tokenized sending, FTP, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations, such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 13.110.208.5–15

S13

For SOAP as part of Marketing Cloud Engagement.

• 96.43.154.35

For REST service as part of Marketing Cloud Engagement.

• 96.43.154.31

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 96.43.154.27

For outbound communication, such as tokenized sending, FTP file transfer, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 96.43.155.5–15

S50

For SOAP as part of Marketing Cloud Engagement.

• 161.71.33.234

For REST API as part of Marketing Cloud Engagement.

• 161.71.33.240

For Enterprise 2.0 and cloud connector as part of Marketing Cloud Engagement.

• Not applicable

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 161.71.33.231

For the authentication of web services as part of Marketing Cloud Engagement.

• Not applicable

For outbound communication, such as tokenized sending, FTP file transfer, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 161.71.32.1–254

S51

For SOAP as part of Marketing Cloud Engagement.

• 159.92.152.41

For REST service as part of Marketing Cloud Engagement.

• 159.92.152.27

For the Enhanced FTP function as part of Marketing Cloud Engagement.

• 159.92.152.23

For outbound communication, such as tokenized sending, FTP file transfer, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement.

• 159.92.156.5–15

For outbound communication, such as tokenized sending, FTP file transfer, HTTP POST, and HTTP GET, as part of Marketing Cloud Engagement. For importing and exporting files to external file locations such as Amazon Simple Storage Service (Amazon S3), Azure Blob Storage, Google Cloud Storage, or an external SFTP site.

• 159.92.156.5–15

S401

For all outbound communication in India, allowlist these IP ranges.

• 3.7.40.253/32
• 13.127.242.165/32
• 3.111.207.196/32
• 3.111.177.240/32
• 15.207.95.104/32
• 3.111.174.240/32

S402

For all outbound communication in Australia, allowlist these IP ranges.

• 54.79.20.115/32
• 13.55.24.233/32
• 3.104.164.223/32
• 54.153.167.131/32
• 52.62.69.59/32
• 13.210.250.4/32

S403

For all outbound communication in Japan, allowlist these IP ranges.

• 3.112.77.80/32
• 52.195.136.189/32
• 52.198.202.177/32
• 18.177.247.76/32
• 13.114.183.4/32
• 52.68.235.128/32

S406

For all outbound communication in Canada, allowlist these IP ranges.

• 3.98.81.76/32
• 15.157.1.169/32
• 15.156.37.35/32
• 15.156.103.154/32
• 15.222.105.40/32
• 52.60.213.237/32

Marketing Cloud Engagement Personalization (Formerly Interaction Studio, Formerly Evergage)

All regions require you to allowlist 52.44.37.68. Allowlist the specific address for your region as well.

AMER

US-1

• 52.44.37.68
• 50.17.91.227
• 3.226.128.100

US-4

• 34.213.58.227
• 35.84.96.111
• 52.39.7.247

US-5

• 3.135.96.57
• 18.118.67.65
• 3.140.55.33

US-6

• 50.16.30.195
• 34.235.184.186
• 3.230.198.141

US-7

• 35.161.65.240
• 44.241.46.26
• 54.189.170.51

EU

Germany-2

• 35.157.44.84
• 3.64.243.252
• 18.197.87.55

APAC

Australia-3:

• 13.238.166.225
• 3.105.158.106
• 54.153.196.195

IP Addresses Purchased via SAP

If you assigned a subdomain to Marketing Cloud Engagement, for example, email.example.com, allowlist the dedicated IP address that Marketing Cloud Engagement assigned to it. Also, allowlist any standalone IP address or IP address provisioned by Marketing Cloud Engagement as part of an SAP package.

REST API Authentication

Marketing Cloud Engagement distributes REST API traffic authenticated using the auth.exacttargetapis.com endpoint across all regions. To ensure that your REST API traffic continues without disruption, and for general Marketing Cloud Engagement usage, add these IP addresses to your allowlist.

• 66.231.94.96
• 68.232.201.185–186
• 198.245.89.238–240
• 13.111.7.92–93
• 13.111.95.45–48
• 13.111.18.82–83

Elastic IP Addresses for Amazon S3 Buckets

If you transfer data into or out of Amazon S3 buckets, add these IP addresses to your allowlists.

MJ401 (India)

• 3.111.177.240
• 15.207.95.104
• 3.111.174.240

MJ402 (Australia)

• 13.210.250.4
• 52.62.69.59
• 54.153.167.131

MJ403 (Japan)

• 52.68.235.128
• 13.114.183.4
• 18.177.247.76

MJ406 (Canada)

• 15.156.103.154/32
• 15.222.105.40/32
• 52.60.213.237/32

IP Addresses for Data 360

See Amazon S3 Bucket Policies for Data 360.

Event Notification Service

Add these addresses to your event listener allowlist for Event Notification Services: