Recent updates to this article
| Date |
Update |
| January 22, 2024 |
Removed category tags for End of Life versions |
| October 12, 2023 |
Additional IP addresses added to Europe, Middle East, and Africa & Asia Pacific sections.
Attachment updated to GTI_Public_Cloud_IP_Addresses_20231011.zip. |
| September 4, 2023 |
Formatting of CSV file containing the Public Cloud IP addresses updated, to remove unrequired spaces that might prevent automatic import.
New file named GTI_Public_Cloud_IP_Addresses_20221202_REV_A.zip as IP addresses in the sheet and article are unchanged. |
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
This article provides the Global Threat Intelligence (GTI) IP addresses to allow so that your network can query GTI. We recommend the use of a fully qualified domain name (FQDN) that returns a list of active endpoints at the nearest Cloud Point of Presence. IP addresses can change. To decouple endpoints from these changes, endpoints shouldn't hardcode IP addresses mentioned in this article. We're providing the list of IP addresses for allow list purposes only.
GTI is hosted as a global cloud service, so hard coding an IP address can result in an outage for one of the following reasons:
- That particular IP address is taken out of service for maintenance.
- A network outage segments a static path to a given IP address in a given data center.
- GTI site host changes.
Access to GTI is configured on port 443 using an FQDN so that a DNS lookup can return the nearest and most accurate IP address records at any given time. This returned result can be any of several IP addresses across the globe. Because the exact IP address isn't known in advance, firewall administrators must open port 443 outbound globally. The preferred configuration method is to configure access to the GTI servers to use port 443 to the FQDN.
Product FQDNs used with GTI
The FQDN depends on the product. To determine the FQDN, see the product documentation for your installed product.
For a list and description of the ENS URLs used to perform off-box communication, see
KB93324 - Endpoint Security off-box communication URLs.
NOTE: If you resolve any of these URLs/IP addresses, you might see the following as part of the domain name mapping:
*.cloudplatform.mcafee.com and
*.gtiservice.trellix.com. These names are expected aliases. The URLs can resolve to multiple and differing IP addresses at different times.
GTI IP addresses
If you have strict outbound traffic security rules in place, allow the GTI traffic using the destination host name. But, if allowing the traffic by destination host name isn't possible due to technical constraints, allow access to all the following Public Cloud resource IP addresses. The IP addresses are subject to change in the future.
Public Cloud resource IP addresses
North America and Latin America
|
3.13.101.252 |
18.229.227.102 |
50.112.162.34 |
| 3.13.175.152 |
18.229.230.27 |
52.8.218.49 |
| 3.13.177.14 |
18.229.234.209 |
52.9.108.36 |
| 3.14.168.72 |
18.229.238.10 |
52.21.68.3 |
| 3.17.93.252 |
18.231.55.149 |
52.22.248.114 |
| 3.17.222.216 |
34.121.122.140 |
52.33.162.6 |
| 3.82.88.111 |
34.125.9.64 |
52.38.76.97 |
| 3.130.165.110 |
34.125.111.170 |
52.52.137.255 |
| 3.130.192.46 |
34.125.237.12 |
52.52.202.243 |
| 3.209.49.187 |
34.125.239.237 |
52.203.225.140 |
| 3.218.82.178 |
34.125.252.7 |
54.69.96.234 |
| 3.220.208.37 |
34.125.253.122 |
54.149.22.132 |
| 3.221.83.69 |
34.135.26.163 |
54.161.18.217 |
| 13.56.143.254 |
34.218.113.76 |
54.176.116.10 |
| 13.57.162.46 |
35.82.216.196 |
54.176.228.68 |
| 13.58.126.78 |
35.85.200.9 |
54.177.146.222 |
| 18.144.151.221 |
35.164.244.168 |
54.191.65.158 |
| 18.204.0.196 |
35.175.169.147 |
54.207.36.207 |
| 18.210.181.15 |
35.184.167.113 |
54.207.37.84 |
| 18.217.35.31 |
35.188.45.29 |
54.215.120.30 |
| 18.221.176.175 |
35.222.129.205 |
54.219.33.114 |
| 18.224.177.231 |
44.226.104.160 |
54.241.112.48 |
| 18.228.142.252 |
44.228.119.21 |
54.241.224.43 |
| 18.228.231.50 |
44.231.4.182 |
54.245.106.41 |
| 18.229.205.82 |
44.236.191.134 |
104.154.142.144 |
| 18.229.214.120 |
44.239.3.191 |
204.236.174.5 |
| 18.229.221.41 |
50.18.16.187 |
177.71.207.91 |
| 3.220.93.110 |
3.134.205.125 |
54.94.79.43 |
| 23.21.241.88 |
3.140.0.73 |
18.230.12.95 |
| 54.175.229.240 |
18.216.207.109 |
54.94.2.224 |
| 3.219.146.220 |
3.131.204.71 |
3.215.17.144 |
| 3.233.10.232 |
52.73.86.166 |
54.205.230.117 |
| 18.216.171.17 |
3.135.167.98 |
3.131.31.255 |
| 3.14.236.220 |
54.94.176.68 |
54.94.231.195 |
| 54.233.215.16 |
54.207.143.12 |
34.125.232.91 |
| 34.125.208.12 |
104.154.170.235 |
35.184.143.52 |
| 18.144.136.160 |
52.52.218.119 |
52.52.214.202 |
| 54.215.183.22 |
35.162.62.189 |
44.241.65.17 |
| 54.212.0.77 |
44.230.248.148 |
15.222.95.125 |
| 3.97.249.94 |
3.97.3.115 |
15.223.90.9 |
| 99.79.149.89 |
99.79.178.38 |
35.182.143.236 |
| 3.98.59.88 |
35.182.17.150 |
15.222.89.80 |
| 52.60.143.11 |
52.60.207.83 |
15.223.129.243 |
| 15.156.52.128 |
3.99.24.147 |
52.60.33.208 |
Europe, Middle East, and Africa
|
3.65.111.235 |
18.198.193.152 |
35.230.131.105 |
| 3.65.248.69 |
18.200.102.222 |
35.234.136.181 |
| 3.70.43.39 |
18.200.177.198 |
35.242.146.31 |
| 3.70.82.67 |
18.202.163.246 |
35.242.178.161 |
| 3.123.143.192 |
18.203.176.203 |
35.246.128.41 |
| 3.124.92.48 |
34.89.196.137 |
35.246.132.219 |
| 3.125.91.105 |
34.142.32.56 |
35.246.165.178 |
| 3.125.151.188 |
34.142.48.231 |
35.246.250.148 |
| 3.248.4.201 |
34.245.253.161 |
52.16.112.58 |
| 18.157.55.87 |
34.249.206.168 |
52.215.124.82 |
| 18.158.158.247 |
34.254.121.67 |
54.72.18.197 |
| 18.158.166.145 |
35.156.221.217 |
63.35.83.224 |
| 18.158.173.34 |
35.158.23.1 |
63.34.127.134 |
| 18.159.170.86 |
35.198.127.181 |
18.203.37.78 |
| 52.31.211.124 |
54.77.221.166 |
54.229.171.110 |
| 52.51.132.177 |
108.128.111.203 |
52.16.69.170 |
| 34.107.57.56 |
34.159.164.161 |
35.242.146.230 |
| 35.230.140.85 |
3.65.151.110 |
3.70.147.89 |
| 3.66.136.60 |
3.76.92.48 |
18.168.62.148 |
| 18.132.11.230 |
13.42.3.213 |
18.132.70.188 |
| 18.134.2.168 |
18.168.49.213 |
35.176.35.74 |
| 18.130.175.99 |
13.42.111.94 |
3.11.241.187 |
| 3.11.21.185 |
18.168.25.2 |
3.9.99.160 |
| 13.41.62.230 |
18.130.164.23 |
3.10.195.223 |
| 15.160.72.24 |
15.161.175.78 |
15.160.61.149 |
| 15.161.88.175 |
18.102.98.144 |
15.161.13.195 |
| 15.161.173.18 |
15.160.86.193 |
18.102.59.147 |
| 15.161.196.127 |
18.102.33.20 |
18.102.9.185 |
| 18.102.14.191 |
18.102.23.45 |
18.102.38.67 |
| 35.152.79.158 |
18.133.173.159 |
18.132.28.181 |
| 3.9.209.84 |
18.169.62.104 |
|
Asia Pacific
|
3.1.172.253 |
13.251.160.226 |
35.197.154.200 |
| 3.1.208.14 |
18.136.232.217 |
35.247.144.219 |
| 3.113.68.241 |
18.138.54.213 |
52.69.3.12 |
| 3.113.144.18 |
18.139.198.177 |
52.69.126.90 |
| 3.113.179.87 |
18.139.210.109 |
52.69.144.176 |
| 3.113.200.66 |
18.141.7.33 |
52.74.48.212 |
| 13.112.13.181 |
34.87.52.131 |
52.76.69.100 |
| 13.113.20.59 |
34.87.64.20 |
52.192.234.170 |
| 13.231.87.245 |
34.126.101.181 |
52.194.198.2 |
| 13.251.72.88 |
34.126.126.157 |
52.221.56.160 |
| 18.178.61.230 |
54.150.53.120 |
54.168.142.24 |
| 35.77.132.118 |
13.214.13.203 |
18.139.213.184 |
| 52.77.205.29 |
13.214.237.14 |
13.113.184.130 |
| 52.193.182.160 |
35.76.50.95 |
35.77.183.205 |
| 18.138.1.181 |
18.140.88.219 |
3.0.210.222 |
| 52.220.77.127 |
34.143.163.84 |
34.87.81.24 |
| 15.207.187.50 |
43.205.70.215 |
15.206.20.137 |
| 65.0.137.131 |
65.1.118.171 |
65.2.86.56 |
| 13.235.175.3 |
52.66.254.208 |
35.154.133.51 |
| 15.207.82.44 |
65.1.184.235 |
65.0.195.250 |
| 65.1.219.210 |
3.7.178.162 |
65.2.41.242 |
| 52.66.17.96 |
3.7.108.73 |
3.108.38.112 |
| 15.206.12.52 |
3.109.148.233 |
|
To download all the Public Cloud IP addresses in CSV format, download
GTI_Public_Cloud_IP_Addresses_20231011.zip from the "Attachment" section of this article.
