Overview
IP whitelisting (IP allowlisting) is a security practice that allows organizations to restrict access to their networks, systems, and resources to predefined IP addresses, blocking all others. This cybersecurity mechanism helps businesses prevent unauthorized access and protect sensitive data. Businesses can use IP whitelisting to control access to their tools, software, applications, websites, and critical resources. This document outlines the relevance of IP whitelisting and how marketers and developers can use it effectively.Key Advantages of IP Whitelisting
The following are the advantages of IP whitelisting:- Enhanced security: By permitting connections only from known, trusted IP addresses, whitelisting effectively blocks potential threats from unknown sources, significantly reducing the risk of unauthorized access and malware attacks. Overall, it adds an extra layer of security to protect sensitive data.
- Proactive defense: Unlike blacklisting, which relies on identifying and blocking known threats, whitelisting takes a proactive approach by allowing only approved access, making it more effective against emerging threats.
- Reduced false positives: Because whitelisting blocks connections only from unapproved sources, the chances of accidentally blocking legitimate users are minimized, reducing frustration and disruption.
- Improved network visibility: By actively managing the list of allowed IP addresses, organizations gain better insight into who is accessing the network and can easily identify suspicious activity.
Whitelist MoEngage IPs
MoEngage sends/receives data to/from the servers of customers or partners. With IP whitelisting, you can verify that requests are actually coming from MoEngage, adding an additional layer of security. MoEngage is a multi-tenant SaaS vendor, so our services change IPs frequently for scale and security. We may need to send data from a different server when circumstances demand it to ensure our services are operational and customers are not impacted. MoEngage may use one or all of the IPs listed in this document while sending/receiving data to/from the servers of customers or partners.Campaign Sending
MoEngage uses dynamic IPs. But if you need MoEngage to access your service via static IPs, you must whitelist MoEngage IPs on your side. To enable static IPs for a messaging channel, contact your Customer Success Manager (CSM) or the Support team to request enablement of Send via Static IPs for<Messaging Channel>. After static IPs for a messaging channel are enabled, you can whitelist the relevant MoEngage IPs based on the data center where your workspace is located. For more information on MoEngage Data Centers, refer here.
Here are the IPs that you can whitelist to ensure that only allowed IPs send messages:
| Channels or Campaigns | Data Center | MoEngage IPs That Need Whitelisting |
|---|---|---|
| Connector Campaigns | DC-01 |
|
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | 18.217.73.1 | |
| DC-05 | NA | |
| DC-06 |
| |
SMS Campaigns
| DC-01 |
|
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | 18.217.73.1 | |
| DC-05 | NA | |
| DC-06 |
| |
| WhatsApp Campaigns | DC-01 |
|
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | 18.217.73.1 | |
| DC-05 | NA | |
| DC-06 |
| |
Email Campaigns (sent via Custom API/Custom SMTP Connector/Private ESP or using PII Fetch API/Content API) | DC-01 | 52.6.248.125 |
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | NA | |
| DC-05 | NA | |
| DC-06 |
| |
| Push Campaigns | DC-01 |
|
| DC-02 |
| |
| DC-03 |
| |
| DC-04 |
| |
| DC-05 | NA | |
| DC-06 |
| |
| Content API or Fetch PII Token | All data centers (DC-01 - DC-06) | PII and Content API use the same IPs as that of the channel. So, if you plan to use one or more channels in the campaign, whitelist all the campaign channel IPs mentioned above. |
Data Transfer
Here are the IPs that you can whitelist for our Data Imports and Export services to ensure that only whitelisted IPs are reading or writing data from/to your data services:| Data Transfer | Data Center | MoEngage IPs That Need Whitelisting |
|---|---|---|
| Data Imports | DC-01 |
|
| DC-02 |
| |
| DC-03 |
| |
| DC-04 |
| |
| DC-05 | 18.143.35.151 | |
| DC-06 |
| |
Data Warehouse Exports For example, SFTP, Snowflake, Databricks, and so on. | DC-01 |
|
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 |
| |
| DC-05 | 18.143.35.151 | |
| DC-06 | NA | |
Streams/Partner Exports For example, mParticle, Segment, and so on. | DC-01 | 52.6.248.125 |
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | 18.217.73.1 | |
| DC-05 | 18.143.35.151 | |
| DC-06 | 43.218.197.196 |
Audience Transfer
Here are the IPs that you can whitelist for Outbound Segment sync to ensure that these MoEngage IPs are allowed to call your/partner’s audience sync APIs:| Audience Transfer | Data Center | MoEngage IPs That Need Whitelisting |
|---|---|---|
| Outbound Segment Sync | DC-01 | 52.6.248.125 |
| DC-02 | NA | |
| DC-03 | 3.6.251.95 | |
| DC-04 | NA | |
| DC-05 | NA | |
| DC-06 | NA | |
| File Segment API | DC-01 | 184.72.243.80 |
| DC-02 | 18.195.110.23 | |
| DC-03 | 3.6.251.95 | |
| DC-04 | 3.139.47.208 | |
| DC-05 | 18.143.35.151 | |
| DC-06 | 43.218.197.196 | |
| DC-101 | 34.218.145.185 |
Catalog and Feeds
You can whitelist the following MoEngage IPs to allow MoEngage to import their catalog feed via SFTP-based ingestion:IP Whitelisting for Data APIs
IP whitelisting is an additional security layer for MoEngage’s Server-to-Server (S2S) Data APIs. When enabled, MoEngage will only accept API requests from a pre-approved list of IP addresses associated with your workspace.How It Works
Once enabled for your workspace, every S2S API request is validated against your approved IP list. Requests originating from an IP not on the list are rejected with a403 Forbidden error.
APIs Covered
IP whitelisting applies to all MoEngage Data APIs when enabled.IP whitelisting is applied at the workspace level and cannot be selectively enabled for individual APIs.
Enabling IP Whitelisting
This is an opt-in feature. To enable it, contact MoEngage Support with:- Your Workspace ID (App ID)
- The IP addresses or CIDR ranges from which your servers will send API requests
MoEngage does not provide a self-serve option to configure IP whitelisting. You must route requests through our support team.
What Changes After Enablement
- All S2S API requests must originate from a whitelisted IP.
- If you route requests through a proxy, load balancer, or NAT gateway, ensure the outbound IP visible to MoEngage is whitelisted — not your internal IP.
Supported IP Formats
Both exact IPs and CIDR ranges are supported:Error Response
If a request is blocked due to an IP validation failure, you will receive anHTTP 403 Forbidden status with the following response:
Update your IP Whitelist
To add or remove IPs, contact MoEngage Support. Changes typically take effect within a few minutes.Whitelist Your IPs
IPs from your or your partner’s networks that can access MoEngage services:Conclusion
IP whitelisting is important for maintaining data security when using MoEngage services. Contact the MoEngage Support team for additional assistance or clarification on IP whitelisting procedures.Frequently Asked Questions
Does MoEngage provide IP whitelisting for MoEngage APIs? Can a brand restrict which IPs can access MoEngage APIs on the API key level? MoEngage doesn’t currently provide this capability. To submit the request:- Log in to your MoEngage dashboard.
- In the upper-right corner, click Need help and then click Submit product idea.