Mail Server IP Ranges

• Mimecast - Email Security Cloud Gateway - Data Centers & URLs
• MailChimp - IP Address Ranges to Trust
• Sendgrid - Approximate list of the IP addresses that the domain sendgrid.net allows email to be sent from according to their SPF record
• ClickDimensions
• Intuit.com - Quickbooks
• TalentPro - Payroll Service
• Constant Contact
• Zoom - Email Server IPs
• iCIMS - Mailservers
• Canva - Mailserver IP Ranges

Mimecast - Email Security Cloud Gateway - Data Centers & URLs

Considerations

• When a user enters their email address into Mimecast's Administration Console or an API client, a global resource determines the user's parent account location. This resource provides a 302 redirect to the correct location, ensuring uninterrupted service. These endpoints are available at all Mimecast data centers.
• Outbound HTTPS traffic from your network may be observed to an IP address outside your Mimecast region. To avoid disruption, allow outbound HTTPS connections to these locations. No email is transmitted using this method.
• Your region may be somewhere other than where you are physically located. It is where your data is located. For example, a company with European offices may host its data in North America.
• You must ensure that all connections are allowed access to the ports for the networks listed and mapped to the correct destination on your network.
• To prevent disruption to your service, it's important to ensure that:
  • You allow connections to the appropriate ports from your region's entire Mimecast IP Ranges.
  • They are mapped through to the correct destination on your network.

Global Application Resources

Global Application URL

Application	URL
Administration Console	https://login.mimecast.com
Mimecast Personal Portal	https://webmail.mimecast.com
Mimecast API	https://api.mimecast.com
Service Monitor	https://monitor.mimecast.com/Account/Login
Mimecast E2E, Customer Managed Migration	https://*.mimecast.com

Protocol Connection Ports

The following list shows the most common connection types and the general ports used for each protocol. Also included are the standard connection ports for Mimecast Applications:

Protocol	Default Port	Usage
Simple Mail Transfer Protocol (SMTP)	25	Send Connectors, SMTP Journaling, user application SMTP Services.
Post Office Protocol (POP3)	110	POP Journaling, user application POP Services.
Post Office Protocol Secure (POP3S)	995
Lightweight Directory Access Protocol (LDAP)	389	Directory Synchronization
Lightweight Directory Access Protocol Secure (LDAPS)	636
HyperText Transfer Protocol (HTTP)	80	Downloading Strip and Link attachments, Mimecast Synchronization Engine (MSE) with Office 365 hybrid environments. Mimecast for Outlook also authenticates using this port.
HyperText Transfer Protocol (HTTPS)	443	Access to the Administration Console, Mimecast Personal Portal, Mimecast Mobile, Mimecast for Outlook, and Mimecast Synchronization Engine, Mimecast E2E, Customer Managed Migration.

Mimecast Website

To ensure that your users can always log in to the Mimecast website, it is recommended to permit traffic to the Mimecast website IP ranges:

Location	IP Address	CIDR	Netmask
Data Center 1	146.101.202.134	/32	255.255.255.255
	146.101.202.135	/32	255.255.255.255
Data Center 2	81.145.134.178	/32	255.255.255.255
	81.145.134.173	/32	255.255.255.255

Regional IP Addresses, Network Ranges, and Application URLs

Europe (Excluding Germany)

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
193.7.204.0/24	193.7.204.1	to	193.7.204.254	255.255.255.0
193.7.205.0/24	193.7.205.1	to	193.7.205.254	255.255.255.0
195.130.217.0/24	195.130.217.1	to	195.130.217.254	255.255.255.0
91.220.42.0/24	91.220.42.1	to	91.220.42.254	255.255.255.0
185.58.84.0/24	185.58.84.1	to	185.58.84.254	255.255.255.0
185.58.85.0/24	185.58.85.1	to	185.58.85.254	255.255.255.0
185.58.86.0/24	185.58.86.1	to	185.58.86.254	255.255.255.0
185.58.87.0/24	185.58.87.1	to	185.58.87.254	255.255.255.0
207.82.80.0/24	207.82.80.1	to	207.82.80.254	255.255.255.0

IP Addresses/Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges:

Region	IP Address Range 1			IP Address Range 2
Europe (excluding Germany)	185.58.87.40	to	185.58.87.49	185.58.84.40	to	185.58.84.49

Application URLs

Application	URL
Administration Console	https://login-uk.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-uk.mimecast.com/m/portal/login/#/login
Mimecast API	https://eu-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-uk.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Europe (excluding Germany)	url.uk.m.mimecastprotect.com

Germany

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
194.104.108.0/24	194.104.108.1	to	194.104.108.254	255.255.255.0
194.104.109.0/24	194.104.109.1	to	194.104.109.254	255.255.255.0
194.104.110.0/24	194.104.110.1	to	194.104.110.254	255.255.255.0
194.104.111.0/24	194.104.111.1	to	194.104.111.254	255.255.255.0
147.28.34.0/24	147.28.34.1	to	147.28.34.254	255.255.255.0
147.28.35.0/24	147.28.35.1	to	147.28.35.254	255.255.255.0
51.163.158.0/24	51.163.158.1	to	51.163.158.254	255.255.255.0
51.163.159.0/24	51.163.159.1	to	51.163.159.254	255.255.255.0
62.140.7.0/24	62.140.7.1	to	62.140.7.254	255.255.255.0
62.140.10.0/24	62.140.10.1	to	62.140.10.254	255.255.255.0

IP Addresses/Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges:

Region	IP Address Range 1			IP Address Range 2
Germany (DE-Grid)	51.163.159.40	to	51.163.159.49	62.140.10.40	to	62.140.10.49

Application URLs

Application	URL
Administration Console	https://login-de.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-de.mimecast.com/m/portal/login/#/login
Mimecast API	https://de-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-de.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Germany	url.de.m.mimecastprotect.com

United States of America

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
170.10.132.0/24	170.10.132.1	to	170.10.132.254	255.255.255.0
170.10.133.0/24	170.10.133.1	to	170.10.133.254	255.255.255.0
170.10.128.0/24	170.10.128.1	to	170.10.128.254	255.255.255.0
170.10.129.0/24	170.10.129.1	to	170.10.129.254	255.255.255.0
170.10.130.0/24	170.10.130.1	to	170.10.130.254	255.255.255.0
170.10.131.0/24	170.10.131.1	to	170.10.131.254	255.255.255.0
207.211.31.0/25	207.211.31.1	to	207.211.31.127	255.255.255.128
207.211.30.0/24	207.211.30.1	to	207.211.30.254	255.255.255.0
205.139.110.0/24	205.139.110.1	to	205.139.110.254	255.255.255.0
205.139.111.0/24	205.139.111.1	to	205.139.111.254	255.255.255.0
216.205.24.0/24	216.205.24.1	to	216.205.24.254	255.255.255.0
63.128.21.0/24	63.128.21.1	to	63.128.21.254	255.255.255.0

IP Addresses / Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges. 

Region
United States of America (US-Grid)	207.211.30.40	to	207.211.30.49	205.139.111.40	to	205.139.111.49

Application URLs

Application	URL
Administration Console	https://login-us.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-us.mimecast.com/m/portal/login/#/login
Mimecast API	https://us-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-us.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
United States of America (US-Grid)	url.us.m.mimecastprotect.com

United States of America (USB)

IP Addresses and Network Ranges 

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
170.10.150.0/24	170.10.150.1	to	170.10.150.254	255.255.255.0
170.10.151.0/24	170.10.151.1	to	170.10.151.254	255.255.255.0
170.10.152.0/24	170.10.152.1	to	170.10.152.254	255.255.255.0
170.10.153.0/24	170.10.153.1	to	170.10.153.254	255.255.255.0
170.10.154.0/24	170.10.154.1	to	170.10.154.254	255.255.255.0
170.10.155.0/24	170.10.155.1	to	170.10.155.254	255.255.255.0
170.10.156.0/24	170.10.156.1	to	170.10.156.254	255.255.255.0
170.10.157.0/24	170.10.157.1	to	170.10.157.254	255.255.255.0

IP Addresses / Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges. 

Region	IP Address Range 1			IP Address Range 2
United States of America (USB-Grid)	170.10.150.40	to	170.10.150.49	170.10.152.40	to	170.10.152.49

Application URLs

Field / Option	Description
Administration Console	https://login-usb.mimecast.com/u/login/?gta=apps#/login
Mimecast Personal Portal	https://webmail-usb.mimecast.com/m/portal/login/#/login
Mimecast API	https://usb-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-usb.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
United States of America (USB-Grid)	url.usb.m.mimecastprotect.com

Canada

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
170.10.144.0/24	170.10.144.1	to	170.10.144.254	255.255.255.0
170.10.145.0/24	170.10.145.1	to	170.10.145.254	255.255.255.0
170.10.146.0/24	170.10.146.1	to	170.10.146.254	255.255.255.0
170.10.147.0/24	170.10.147.1	to	170.10.147.254	255.255.255.0
170.10.148.0/24	170.10.148.1	to	170.10.148.254	255.255.255.0
170.10.149.0/24	170.10.149.1	to	170.10.149.254	255.255.255.0
216.145.216.0/24	216.145.216.1	to	216.145.216.254	255.255.255.0

Application URLs

Application	URL
Administration Console	https://login-ca.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-ca.mimecast.com/m/portal/login/#/login
Mimecast API	https://ca-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-ca.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Canada (CA-Grid)	url.ca.m.mimecastprotect.com

South Africa

IP Addresses and Network Ranges

Network	IP Address Range			Netmask
41.74.192.0/24	41.74.192.1	to	41.74.192.254	255.255.255.0
41.74.193.0/24	41.74.193.1	to	41.74.193.254	255.255.255.0
41.74.194.0/24	41.74.194.1	to	41.74.194.254	255.255.255.0
41.74.195.0/24	41.74.195.1	to	41.74.195.254	255.255.255.0
41.74.196.0/24	41.74.196.1	to	41.74.196.254	255.255.255.0
41.74.197.0/24	41.74.197.1	to	41.74.197.254	255.255.255.0
41.74.198.0/24	41.74.198.1	to	41.74.198.254	255.255.255.0
41.74.199.0/24	41.74.199.1	to	41.74.199.254	255.255.255.0
41.74.200.0/24	41.74.200.1	to	41.74.200.254	255.255.255.0
41.74.201.0/24	41.74.201.1	to	41.74.201.254	255.255.255.0
41.74.202.0/24	41.74.202.1	to	41.74.202.254	255.255.255.0
41.74.203.0/24	41.74.203.1	to	41.74.203.254	255.255.255.0
41.74.204.0/24	41.74.204.1	to	41.74.204.254	255.255.255.0
41.74.205.0/24	41.74.205.1	to	41.74.205.254	255.255.255.0
41.74.206.0/24	41.74.206.1	to	41.74.206.254	255.255.255.0
41.74.207.0/24	41.74.207.1	to	41.74.207.254	255.255.255.0

IP Addresses / Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges.

Region	IP Address Range 1			IP Address Range 2
South Africa (ZA-Grid)	41.74.202.40	to	41.74.202.49	41.74.207.40	to	41.74.207.49

Application URLs

Application	URL
Administration Console	https://login-za.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-za.mimecast.com/m/portal/login/#/login
Mimecast API	https://za-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-za.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
South Africa (ZA-Grid)	url.za.m.mimecastprotect.com

Australia

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
103.96.20.0/24	103.96.20.1	to	103.96.20.254	255.255.255.0
103.96.21.0/24	103.96.21.1	to	103.96.21.254	255.255.255.0
103.96.22.0/24	103.96.22.1	to	103.96.22.254	255.255.255.0
103.96.23.0/24	103.96.23.1	to	103.96.23.254	255.255.255.0
170.10.134.0/24	170.10.134.1	to	170.10.134.254	255.255.255.0
170.10.135.0/24	170.10.135.1	to	170.10.135.254	255.255.255.0
103.13.69.0/24	103.13.69.1	to	103.13.69.254	255.255.255.0
124.47.150.0/24	124.47.150.1	to	124.47.150.254	255.255.255.0
124.47.189.0/24	124.47.189.1	to	124.47.189.254	255.255.255.0
180.189.28.0/24	180.189.28.1	to	180.189.28.254	255.255.255.0
216.145.217.0/24	216.145.217.1	to	216.145.217.254	255.255.255.0

IP Addresses/Network Ranges for Non-SPF Email Traffic 

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges.

Region	IP Address Range 1			IP Address Range 2
Australia (AU-Grid)	103.96.20.40	to	103.96.20.49	103.96.22.40	to	103.96.22.49

Application URLs

Application	URL
Administration Console	https://login-au.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-au.mimecast.com/m/portal/login/#/login
Mimecast API	https://au-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-au.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Australia (AU-Grid)	url.au.m.mimecastprotect.com

Offshore

IP Addresses and Network Ranges

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
193.7.206.0/24	193.7.206.1	to	193.7.207.254	255.255.255.0
193.7.207.0/24	193.7.207.1	to	193.7.207.254	255.255.255.0
147.28.32.0/24	147.28.32.1	to	147.28.32.254	255.255.255.0
147.28.33.0/24	147.28.33.1	to	147.28.33.254	255.255.255.0
213.167.75.0/24	213.167.75.1	to	213.167.75.254	255.255.255.0
213.167.81.0/24	213.167.81.1	to	213.167.81.254	255.255.255.0

IP Addresses/Network Ranges for Non-SPF Email Traffic

Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges:

Region	IP Address Range 1			IP Address Range 2
Offshore	213.167.75.240	to	213.167.75.249	213.167.81.240	to	213.167.81.249

Application URLs

Application	URL
Administration Console	https://login-je.mimecast.com/u/login?gta=administration
Mimecast Personal Portal	https://webmail-je.mimecast.com/m/portal/login/#/login
Mimecast API	https://je-api.mimecast.com
Mimecast Secure Messaging Portal ***	https://login-je.mimecast.com/m/secure

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Targeted Threat Protection (TTP)

Suppose you have integrations parsing messages for Mimecast-rewritten URLs or decoding Mimecast-rewritten URLs. In that case, these integrations must know Mimecast's Targeted Threat Protection URL patterns. Relevant integration types include SOAR, XDR, and custom scripts using the Get Message Part or Decode URL API endpoints.

Region	Destination Domain
Offshore	url.je.m.mimecastprotect.com

USPCOM

IP Addresses and Network Ranges 

Note:

When entering IP ranges, it is essential to note that Microsoft 365 limits the CIDR you can use on the Connection Filter (e.g., 205.139.110.0/23 or 185.58.84.0/22). We recommend breaking up the ranges so they end in/24 as a workaround.

Network	IP Address Range			Netmask
170.10.138.0/24	170.10.138.1	to	170.10.138.254	255.255.255.0
170.10.139.0/24	170.10.139.1	to	170.10.139.254	255.255.255.0
170.10.140.0/24	170.10.140.1	to	170.10.140.254	255.255.255.0
170.10.158.0/24	170.10.158.1	to	170.10.158.254	255.255.255.0

Application URLs

Application	URL
Administration Console	https://login.mimecast-pscom-us.com
Mimecast Personal Portal	https://login.mimecast-pscom-us.com
Mimecast API	https://uspcom-api.mimecast-pscom-us.com
Mimecast Secure Messaging Portal ***	https://login.mimecast-pscom-us.com

Note:

*** The Mimecast Secure Messaging Portal URL should only be used by Mimecast customers. Non-Mimecast customers can access the portal by clicking the link in the notification message.

Mimecast URL Scanning Activity

When monitoring IP addresses associated with clicked links in your environment, you may observe activity that does not originate from Mimecast-owned IP addresses or IP addresses listed on this page. As part of the Mimecast threat detection stack, the URL scanning layer can utilize various 3rd party vendors whose IP ranges are subject to change and are not tracked or disclosed by Mimecast. Furthermore, Mimecast employs anonymization techniques to prevent threat actors from recognizing and evading our scanners. To protect Mimecast customers, the associated IP addresses will not be disclosed.

MailChimp - IP Address Ranges to Trust

If you happen to use mailchimp and you don't want your emails coming back to you as being tagged as "spoofing" messages (ie: going to quarantine), you can add to your trusted senders list the IP ranges belonging to mailchimp.

The original IP ranges belonging to MailChimp:

• 205.201.128.0/20
• 198.2.128.0/18
• 148.105.0.0/16

 

Unfortunately, Proofpoint doesn't allow putting in anything bigger than a /24 so we had to break down their IP ranges into /24's

You can find the list below:

205.201.128.0/24
205.201.129.0/24
205.201.130.0/24
205.201.131.0/24
205.201.132.0/24
205.201.133.0/24
205.201.134.0/24
205.201.135.0/24
205.201.136.0/24
205.201.137.0/24
205.201.138.0/24
205.201.139.0/24
205.201.140.0/24
205.201.141.0/24
205.201.142.0/24
205.201.143.0/24
198.2.128.0/24
198.2.129.0/24
198.2.130.0/24
198.2.131.0/24
198.2.132.0/24
198.2.133.0/24
198.2.134.0/24
198.2.135.0/24
198.2.136.0/24
198.2.137.0/24
198.2.138.0/24
198.2.139.0/24
198.2.140.0/24
198.2.141.0/24
198.2.142.0/24
198.2.143.0/24
198.2.144.0/24
198.2.145.0/24
198.2.146.0/24
198.2.147.0/24
198.2.148.0/24
198.2.149.0/24
198.2.150.0/24
198.2.151.0/24
198.2.152.0/24
198.2.153.0/24
198.2.154.0/24
198.2.155.0/24
198.2.156.0/24
198.2.157.0/24
198.2.158.0/24
198.2.159.0/24
198.2.160.0/24
198.2.161.0/24
198.2.162.0/24
198.2.163.0/24
198.2.164.0/24
198.2.165.0/24
198.2.166.0/24
198.2.167.0/24
198.2.168.0/24
198.2.169.0/24
198.2.170.0/24
198.2.171.0/24
198.2.172.0/24
198.2.173.0/24
198.2.174.0/24
198.2.175.0/24
198.2.176.0/24
198.2.177.0/24
198.2.178.0/24
198.2.179.0/24
198.2.180.0/24
198.2.181.0/24
198.2.182.0/24
198.2.183.0/24
198.2.184.0/24
198.2.185.0/24
198.2.186.0/24
198.2.187.0/24
198.2.188.0/24
198.2.189.0/24
198.2.190.0/24
198.2.191.0/24
148.105.0.0/24
148.105.1.0/24
148.105.2.0/24
148.105.3.0/24
148.105.4.0/24
148.105.5.0/24
148.105.6.0/24
148.105.7.0/24
148.105.8.0/24
148.105.9.0/24
148.105.10.0/24
148.105.11.0/24
148.105.12.0/24
148.105.13.0/24
148.105.14.0/24
148.105.15.0/24
148.105.16.0/24
148.105.17.0/24
148.105.18.0/24
148.105.19.0/24
148.105.20.0/24
148.105.21.0/24
148.105.22.0/24
148.105.23.0/24
148.105.24.0/24
148.105.25.0/24
148.105.26.0/24
148.105.27.0/24
148.105.28.0/24
148.105.29.0/24
148.105.30.0/24
148.105.31.0/24
148.105.32.0/24
148.105.33.0/24
148.105.34.0/24
148.105.35.0/24
148.105.36.0/24
148.105.37.0/24
148.105.38.0/24
148.105.39.0/24
148.105.40.0/24
148.105.41.0/24
148.105.42.0/24
148.105.43.0/24
148.105.44.0/24
148.105.45.0/24
148.105.46.0/24
148.105.47.0/24
148.105.48.0/24
148.105.49.0/24
148.105.50.0/24
148.105.51.0/24
148.105.52.0/24
148.105.53.0/24
148.105.54.0/24
148.105.55.0/24
148.105.56.0/24
148.105.57.0/24
148.105.58.0/24
148.105.59.0/24
148.105.60.0/24
148.105.61.0/24
148.105.62.0/24
148.105.63.0/24
148.105.64.0/24
148.105.65.0/24
148.105.66.0/24
148.105.67.0/24
148.105.68.0/24
148.105.69.0/24
148.105.70.0/24
148.105.71.0/24
148.105.72.0/24
148.105.73.0/24
148.105.74.0/24
148.105.75.0/24
148.105.76.0/24
148.105.77.0/24
148.105.78.0/24
148.105.79.0/24
148.105.80.0/24
148.105.81.0/24
148.105.82.0/24
148.105.83.0/24
148.105.84.0/24
148.105.85.0/24
148.105.86.0/24
148.105.87.0/24
148.105.88.0/24
148.105.89.0/24
148.105.90.0/24
148.105.91.0/24
148.105.92.0/24
148.105.93.0/24
148.105.94.0/24
148.105.95.0/24
148.105.96.0/24
148.105.97.0/24
148.105.98.0/24
148.105.99.0/24
148.105.100.0/24
148.105.101.0/24
148.105.102.0/24
148.105.103.0/24
148.105.104.0/24
148.105.105.0/24
148.105.106.0/24
148.105.107.0/24
148.105.108.0/24
148.105.109.0/24
148.105.110.0/24
148.105.111.0/24
148.105.112.0/24
148.105.113.0/24
148.105.114.0/24
148.105.115.0/24
148.105.116.0/24
148.105.117.0/24
148.105.118.0/24
148.105.119.0/24
148.105.120.0/24
148.105.121.0/24
148.105.122.0/24
148.105.123.0/24
148.105.124.0/24
148.105.125.0/24
148.105.126.0/24
148.105.127.0/24
148.105.128.0/24
148.105.129.0/24
148.105.130.0/24
148.105.131.0/24
148.105.132.0/24
148.105.133.0/24
148.105.134.0/24
148.105.135.0/24
148.105.136.0/24
148.105.137.0/24
148.105.138.0/24
148.105.139.0/24
148.105.140.0/24
148.105.141.0/24
148.105.142.0/24
148.105.143.0/24
148.105.144.0/24
148.105.145.0/24
148.105.146.0/24
148.105.147.0/24
148.105.148.0/24
148.105.149.0/24
148.105.150.0/24
148.105.151.0/24
148.105.152.0/24
148.105.153.0/24
148.105.154.0/24
148.105.155.0/24
148.105.156.0/24
148.105.157.0/24
148.105.158.0/24
148.105.159.0/24
148.105.160.0/24
148.105.161.0/24
148.105.162.0/24
148.105.163.0/24
148.105.164.0/24
148.105.165.0/24
148.105.166.0/24
148.105.167.0/24
148.105.168.0/24
148.105.169.0/24
148.105.170.0/24
148.105.171.0/24
148.105.172.0/24
148.105.173.0/24
148.105.174.0/24
148.105.175.0/24
148.105.176.0/24
148.105.177.0/24
148.105.178.0/24
148.105.179.0/24
148.105.180.0/24
148.105.181.0/24
148.105.182.0/24
148.105.183.0/24
148.105.184.0/24
148.105.185.0/24
148.105.186.0/24
148.105.187.0/24
148.105.188.0/24
148.105.189.0/24
148.105.190.0/24
148.105.191.0/24
148.105.192.0/24
148.105.193.0/24
148.105.194.0/24
148.105.195.0/24
148.105.196.0/24
148.105.197.0/24
148.105.198.0/24
148.105.199.0/24
148.105.200.0/24
148.105.201.0/24
148.105.202.0/24
148.105.203.0/24
148.105.204.0/24
148.105.205.0/24
148.105.206.0/24
148.105.207.0/24
148.105.208.0/24
148.105.209.0/24
148.105.210.0/24
148.105.211.0/24
148.105.212.0/24
148.105.213.0/24
148.105.214.0/24
148.105.215.0/24
148.105.216.0/24
148.105.217.0/24
148.105.218.0/24
148.105.219.0/24
148.105.220.0/24
148.105.221.0/24
148.105.222.0/24
148.105.223.0/24
148.105.224.0/24
148.105.225.0/24
148.105.226.0/24
148.105.227.0/24
148.105.228.0/24
148.105.229.0/24
148.105.230.0/24
148.105.231.0/24
148.105.232.0/24
148.105.233.0/24
148.105.234.0/24
148.105.235.0/24
148.105.236.0/24
148.105.237.0/24
148.105.238.0/24
148.105.239.0/24
148.105.240.0/24
148.105.241.0/24
148.105.242.0/24
148.105.243.0/24
148.105.244.0/24
148.105.245.0/24
148.105.246.0/24
148.105.247.0/24
148.105.248.0/24
148.105.249.0/24
148.105.250.0/24
148.105.251.0/24
148.105.252.0/24
148.105.253.0/24
148.105.254.0/24
148.105.255.0/24

Sendgrid - Approximate list of the IP addresses that the domain sendgrid.net allows email to be sent from according to their SPF record

50.31.32.0/19 (8192 addresses)
149.72.0.0/16 (65536 addresses)
159.183.0.0/16 (65536 addresses)
167.89.0.0/17 (32768 addresses)
168.245.0.0/17 (32768 addresses)
192.254.112.0/20 (4096 addresses)
198.21.0.0/21 (2048 addresses)
198.37.144.0/20 (4096 addresses)
208.117.48.0/20 (4096 addresses)
223.165.113.0/24 (256 addresses)
223.165.115.0/24 (256 addresses)
223.165.118.0/23 (512 addresses)
223.165.120.0/23 (512 addresses)

ClickDimensions

66.240.227.4/32
66.240.227.9/32
66.240.227.18/32
66.240.227.21/32
63.143.57.132/32
63.143.57.137/32
63.143.57.146/32
63.143.57.149/32
135.84.216.160/32
135.84.216.224/32
135.84.217.32/32
135.84.217.96/32
34.245.210.9/32
34.245.210.10/32
34.245.210.11/32
34.245.210.12/32
34.245.210.13/32
34.245.210.14/32
34.245.210.15/32
34.245.210.16/32
213.206.105.68/32
213.206.105.69/32
213.206.105.70/32
213.206.105.73/32
213.206.105.74/32
213.206.105.75/32
213.206.105.76/32

Intuit.com - Quickbooks

199.16.139.16/32
199.16.139.17/32
199.16.139.18/32
199.16.139.20/32
199.16.139.21/32
199.16.139.22/32
199.16.139.23/32
199.16.139.24/32
199.16.139.25/32
199.16.139.26/32
199.16.139.27/32
206.108.40.10/32
206.108.40.11/32
206.108.40.12/32
206.108.40.13/32
206.108.40.14/32
206.108.40.15/32
206.108.40.16/32
206.108.40.17/32
206.108.40.18/32
206.108.40.28/32
206.108.40.7/32
206.108.40.8/32
206.108.40.89/32
206.108.40.9/32
206.108.40.90/32
206.108.40.91/32
206.108.40.92/32
206.154.105.172/32
206.154.105.173/32
206.154.105.174/32
206.154.105.175/32
206.154.105.176/32
206.154.105.177/32
206.154.105.178/32
206.154.105.179/32

TalentPro - Payroll Service

149.72.137.232/32
149.72.188.204/32
167.89.1.65/32
168.245.47.229/32

Constant Contact

208.75.123.0/24
205.207.106.0/24

Zoom - Email Server IPs

---

You may receive emails from Zoom regarding notifications, activation emails, password resets, and more.

• Account-related notifications will come from no-reply@zoom.us.
• Support ticket emails will come from customercare@zoom.us.

While most mail servers receive Zoom's emails within a few minutes, some mail servers may take 30 minutes or longer. 

Zoom's email server IPs

If your email is managed by your organization, you can ask them to ensure
no-reply@zoom.us, as well as the following IP addresses, are allowed by your company's email server:

134.224.168.131/32
134.224.168.132/32
149.72.21.92/32
149.72.32.163/32
149.72.59.154/32
149.72.112.79/32
149.72.122.209/32
149.72.134.114/32
149.72.163.203/32
149.72.185.127/32
149.72.191.243/32
149.72.196.70/32
149.72.196.77/32
149.72.198.96/32
149.72.198.100/32
149.72.199.144/32
149.72.249.102/32
149.72.73.235/32
159.183.141.227/32
159.183.146.28/32
159.183.146.37/32
159.183.146.41/32
159.183.150.18/32
159.183.151.211/32
159.183.151.213/32
159.183.156.108/32
159.183.179.39/32
159.183.187.77/32
159.183.192.104/32
159.183.198.7/32
159.183.198.70/32
159.183.204.195/32
159.183.220.232/32
159.183.220.239/32
167.89.93.232/32
168.245.118.48/32
170.114.15.172/32
170.114.15.173/32
170.114.15.174/32
170.114.15.175/32
170.114.15.176/32
170.114.15.177/32
170.114.15.178/32
170.114.15.179/32
170.114.15.180/32
170.114.15.181/32
170.114.15.182/32
170.114.15.183/32
170.114.15.184/32
170.114.15.185/32
170.114.15.186/32
170.114.15.187/32
170.114.15.188/32
170.114.15.189/32
170.114.15.190/32
170.114.15.191/32
170.114.15.192/32
170.114.15.193/32
170.114.44.124/32
170.114.44.125/32

Exercise caution if you receive a suspicious or unexpected email appearing to come from Zoom that’s not from one of the IPs listed above. If you receive a suspicious email from Zoom, you can report it by submitting a request to Zoom’s Trust & Safety team. To help prevent fraudulent or suspicious emails, we encourage organizations to consider enabling a DMARC (Domain-based Message Authentication,  Reporting, and Conformance) policy that rejects emails that fail DKIM and SPF.

How to troubleshoot not receiving emails from Zoom

• Check the spam or junk folder on your email service, as some services may mistakenly mark these emails as spam.
• If your email is managed by your organization, you can ask them to ensure no-reply@zoom.us, as well as the IP addresses listed above, are allowed by your company's email server.
• Chat with us, mentioning “not receiving emails”. Our chatbot can help guide you through troubleshooting steps if you’re still not receiving emails from Zoom.

iCIMS - Mailservers

US, Canadian, and EU Mail Hosting Environments

iCIMS systems allows for users to send emails to any recipient with a profile within the system. The email will be sent from an iCIMS server using one of the IP addresses listed below. If your company only allows emails from specific senders on its firewall, it may be necessary to allowlist the following ranges below, to ensure successful delivery.  
 
iCIMS follows best practice recommendations regarding email delivery using Optimistic TLS, SPF, DKIM and DMARC.

• All iCIMS email sending domains are origin controlled with SPF.
• All iCIMS email display domains are authenticated with 2048 bit DKIM keys.
• All iCIMS email domains are further authenticated with DMARC reject policies.

 

IPv4 Network	IPv4 IP Range
162.247.160.0/21	162.247.160.1 - 162.247.167.254

Sending Domains

The first thing your recipients see when they open your email is your address in the From: field, also known as the Friendly From or the Visible Sender. The Sending Domain is the domain portion of this email address.

The sending domains that iCIMS uses are as follows:

• For ATS customers hosted in US and Canada: @talent.icims.com
• For ATS customers hosted in EU: @talent.icims.eu
• For most non-ATS iCIMS products: @icims.com

Bounce Domains

The first thing a receiving mail server will see when they receive an email from an iCIMS system is the bounce email address, also known as the Return-Path or the Envelope Sender. The Bounce Domain is the domain portion of this email address. This email address is typically hidden and only visible in the full email source headers.
 
The bounce domain that iCIMS uses are as follows:

• For US and Canadian hosting environments: @bounces.icims.com
• For EU hosting environments:  @bounces.icims.eu

Notes:

• The IP addresses listed above are dedicated to iCIMS customer email traffic only. 

• iCIMS does not require all customers to add the entire range above to your allowlist. However, adding to your allowlist may be necessary if iCIMS is sending as your email domain.
  • If iCIMS is sending email as your domain and you wish to allow this behavior, please reference the Configuring Email Authentication article.
  • If iCIMS is sending emails as your domain and you do not wish this to continue, bi-directional email must be re-enabled in your iCIMS system. Submit a case to iCIMS Technical Support to make sure these default settings are enabled.
• iCIMS cannot provide a single IP address for customer email traffic.
• iCIMS prefers TLS for SMTP traffic where the receiving mail server supports TLS but is unable to require TLS for any specific customer.

Canva - Mailserver IP Ranges

Email IP Addresses

If needed, institutions can allow all static Canvas Email IP addresses.

When Email IP addresses are allowlisted, the entire list of IP addresses should be allowlisted. The variety of IP addresses ensure a specific IP is not overloaded and activity can be distributed across various data centers as needed. This recommendation also applies to adding international IP addresses as well.

Note: The IP list may be updated at any time. 

Customers hosted in Canada
99.79.19.152/32
52.60.179.121/32
23.249.209.14/32
23.249.209.15/32

Customers hosted in Ireland (DUB) or Frankfurt (FRA)
54.240.89.126/32
54.240.89.127/32
54.240.89.128/32
54.240.89.129/32
54.240.89.130/32

Customers hosted in Singapore (SIN) or Sydney (SYD)
69.169.235.184/32
69.169.235.186/32
69.169.235.185/32

Customers hosted in Virginia (IAD) or Oregon (PDX)
23.249.221.108/32
23.249.221.109/32
23.249.221.110/32
23.249.221.111/32
23.249.221.112/32
23.249.221.113/32
23.249.221.114/32
23.249.221.115/32
23.249.221.116/32
23.249.221.117/32
23.249.221.118/32
23.249.221.119/32
23.249.221.120/32
23.249.221.121/32
23.249.221.122/32
23.249.221.123/32
23.249.221.124/32
23.249.221.125/32
23.249.221.126/32
23.249.221.127/32
54.240.127.159/32
54.240.127.60/32
54.240.127.61/32
54.240.127.62/32
54.240.127.63/32
54.240.127.64/32
54.240.127.65/32
54.240.127.66/32
54.240.127.67/32
54.240.127.68/32
54.240.14.1/32
54.240.14.100/32
54.240.14.102/32
54.240.14.103/32
54.240.14.105/32
54.240.14.107/32
54.240.14.128/32
54.240.14.130/32
54.240.14.131/32
54.240.14.139/32
54.240.14.154/32
54.240.14.188/32
54.240.14.198/32
54.240.14.199/32
54.240.14.2/32
54.240.38.184/32
54.240.38.185/32
54.240.38.186/32
54.240.38.187/32
54.240.38.188/32
23.249.221.12/32
23.249.221.202/32
54.240.68.117/32
54.240.68.118/32
54.240.68.119/32
54.240.68.120/32
54.240.68.121/32
54.240.68.123/32
54.240.76.81/32
54.240.76.83/32
54.240.76.85/32
54.240.76.87/32
54.240.76.88/32
54.240.76.92/32
54.240.76.96/32