Forums/Community/Support tips & notes

Zendesk Public IP addresses

Adam
posted this on February 07, 2013 16:05

Zendesk maintains this list of public IP addresses to allow customers to provide whitelist rules for access to their internal resources by Zendesk servers. 

IP Addresses

LAST UPDATED: December 6, 2013 (added: 23.253.8.0/24 range)

  • 23.253.8.0/24  (newest)
  • 50.57.4.208/29
  • 50.57.199.0/27
  • 96.46.150.192/27
  • 96.46.156.0/24
  • 108.166.24.224/28
  • 108.166.31.240/29
  • 162.209.39.0/24
  • 173.203.47.128/27
  • 173.203.47.160/27
  • 174.137.46.0/24
  • 184.106.12.184/29
  • 184.106.40.64/28
  • 185.12.80.0/22
  • 192.161.144.0/20
  • 198.61.143.28/30
  • 198.61.149.152/29
  • 198.101.188.224/27

Note: This list should be considered exhaustive and complete as of the date listed above. There may, from time-to-time, be new IP addresses added or removed. We will strive to provide advanced notice of these changes, though it may be operationally necessary to add new IP addresses on an emergency basis on rare occasions.

Outbound Email Servers are listed in our spf record, which we update as needed.
Our spf record can be read by these commands:

    host -t TXT mail.zendesk.com

or

    dig txt mail.zendesk.com

 

Comments

User photo
Javier Linares
frogtek

Hi,

I've pinged my zendesk URL "ping frogtek.zendesk.com" and got the IP 108.166.31.242 which is not listed above.

Do you know why? Which IP should I include in my whitelist?

 

Thanks!

March 07, 2013 22:13
User photo
Adam
Zendesk

Hi Javier,

 

The list has been updated.

March 08, 2013 14:21
User photo
J Tro

Just curious at at this point. I am familiar with RemoteDesktop, but I've never even seen a Citrix remote desktop.  Are there any public zendesk test servers where I might login using receiver?  Howto also appreciated.  
Thanks in advance,
Jac 

March 09, 2013 13:07
User photo
Brandon K.
Zendesk

Hey J Tro,

Is Citrix remote desktop an integration you found? If you have found a way to use the Citrix remote desktop through our Rest API you could use it on a trial account by going to www.zendesk.com/signup and creating a new trial. This will give you a fully functional Zendesk account for 30 days that you can use to try out our service or any related integrations.

March 11, 2013 09:57
User photo
J Tro

Tried signing up twice on the citrix.com site, but cannot login.  Will try here, and thanks...

March 12, 2013 06:09
User photo
Mark Stringer

Is it possible to add a subscription-based email notifications list for changes to this public IP address list please?

March 27, 2013 01:56
User photo
Jennifer Rowe
Zendesk

Hi Mark,

Just click Subscribe at the top-right corner of the article.

April 12, 2013 15:44
User photo
Sean Kinney
Zendesk

For those of you who are subscribed to this article, please note that we just updated this document to reflect three new ranges:

  • 198.61.143.28/30
  • 198.101.188.224/27
  • 162.209.39.0/24
May 23, 2013 17:40
User photo
Kevin Taber

Read a SPF record from a Windows OS via the following command:

nslookup -q=TXT mail.zendesk.com 8.8.8.8

May 24, 2013 05:58
User photo
James Rosen
Zendesk

We just added the range 96.46.156.0/24 to the public IP addresses.

June 11, 2013 18:30
User photo
Christoph Kluge
Beauty Trend Holding GmbH

Do you server your Sandbox system through the same ip pool? a quick ping/dig resolved to one of them.. 

June 27, 2013 03:36
User photo
Laura D.
Zendesk

Hi Christoph, 

These IPs are listed only to allow customers to provide whitelist rules for access to their internal resources by Zendesk servers. Meaning you can allow these IPs to talk to your internal resources knowing the information is coming specifically from Zendesk. There may be other IPs that are involved in the process of running Zendesk but we don't maintain a public list of those. 

June 27, 2013 13:43
User photo
Sabahudin Zaimbegovic

We are facing right now the challenge to get emails from Zendesk (sender address support@ourdomain.com) in order to be accepted by our email Server. Those emails are normally detected as realying and rejected.
If we would whitelist all your ip addresses (some thousands), it would be a big security impact inside of our IT infrastructure and this is declined by our security department. And finally, it is not really viable setting.
At the moment our Agents cannot get any notification from our Zendesk portal. And this is very frustrating for us.

Do you have any other approach to this issue? Can you define more exact your mail servers, which are sending emails to our mail server?
Is SMTP/Auth a development topic for you?

August 02, 2013 05:27
User photo
Kevin Taber

Looks like my spam filter started blocking notification replies from a new IPs not listed above:

50.57.4.208

50.57.4.209

50.57.4.210

September 10, 2013 06:10
User photo
Nick de Beer

Same issues here. The range seems to have moved to 50.57.4.0/24 from 50.57.4.0/27 in this document.

Emailed support.

September 10, 2013 06:30
User photo
Kevin Taber

@Nick de Beer

 

The range is different.. the /27 was 50.57.199.0 .. the 50.57.4.x is new.

September 10, 2013 06:33
User photo
Nick de Beer

True. been having issues all day since we traced it out - whitelisted the new range with a /24 to be sure. Zendesk your change control is a bit lacking..

September 10, 2013 06:38
User photo
Sean Kinney
Zendesk

Our apologies for the delayed notification! We've updated the IP list to include the following new range:

  • 50.57.4.208/29
September 10, 2013 09:51
User photo
Adam L.
Zendesk

@Sabahudin

I understand your frustration here - however, if you are using a cloud service that also send emails, you will have to whitelist all of our IPs.

Unfortunately, for security reasons, whitelisting the IPs is generally the best option here. 

SMTP might be considered in the future, but as of now there is nothing formally planned here. 

Sorry for any inconvenience this might be causing - let us know if we can help in any additional way.

September 10, 2013 11:13
User photo
Kaydian

What the protocol and port being used?

October 03, 2013 12:55
User photo
Laura D.
Zendesk

Hi Kaydian, 

These IP addresses have a broad range of uses, could you describe a little more about what you're looking for in regards to the protocol and port?

October 04, 2013 10:05
User photo
Timothy Holman
teamenergy

Have there been any additions to this recently, we have having strange issues with our Zendesk - Jira link only half working (can create new issues) and not sure if this is why?

October 25, 2013 08:13
User photo
Laura D.
Zendesk

Looks like you already got a reply in your ticket Timothy :)

Just in case anyone else is curious, we were able to fix this morning's glitch, please refresh to make sure you're up to date and let us know if anything still isn't working (support@zendesk.com). Thanks!

October 25, 2013 10:15
User photo
Chris Cogdon
instartlogicinc

Can we have this list available through the API ?

November 18, 2013 14:44
User photo
Laura D.
Zendesk

Hi Chris, 

I passed this suggestion along to the appropriate teams. I haven't gotten a conclusive answer yet about the possibility of doing this; if we do make any changes to how you can access this information we'll provide an update here. 

November 26, 2013 12:21
User photo
Joe S
bitcasa

Is there a specific range or group used by the API? specifically, we are opening a rule to allow zendesk to talk to our internal jira servers.

December 16, 2013 13:42
User photo
Laura D.
Zendesk

Hi Joe, 

We don't have a specific range or group for the API, it could be any of the addresses on this list. If you can whitelist everything that would be the best option. 

December 16, 2013 14:08
User photo
Eduardo P. Xavier
nexsys

Hello.

How can I get the SMTP server IP list?

The commands host -t TXT mail.zendesk.com and dig txt mail.zendesk.com dont return ips.

Thanks!

 

December 18, 2013 08:21
User photo
Laura D.
Zendesk

Hi Eduardo,

We don't maintain a separate list of SMTP servers, I'm sorry, this is the only list of publicly available IPs. 

December 18, 2013 09:16
User photo
Eduardo P. Xavier
nexsys

Hi Laura.

Ok. When you list 

  • 174.137.46.0/24

Do I have to cover 174.137.46.0 - 174.137.46.255 range?

Thanks.

 

December 18, 2013 09:25
User photo
Laura D.
Zendesk

Yes, you should cover 174.137.46.0 - 174.137.46.255.

Let me know if you have more questions!

December 18, 2013 09:42
User photo
Achao

Whitelisting so many IPs is against our security policy. If somehow someone managed to hack one of these servers, it will have access to all customers network. Do you have a list of API calls we can allow in our firewall or a specific port used?

February 02, 2014 01:02
User photo
Laura D.
Zendesk

Hi Achao, 

I think it would help us to have a better understanding what you're trying to do before we give you a recommendation. I'll create a ticket for you so we can go over this in more detail and see if there's a setup that will work for you. 

February 03, 2014 11:39