Which IP addresses should I allow for the Vonage messaging-related API services?

Question

Which IP addresses do I need to add to my firewall to receive HTTP requests from Vonage APIs for the API responses, delivery receipts, inbound messages, and callbacks?

Applies To

• SMS API
• Messages API
• Dispatch API
• Verify API V1 (Legacy) 
• Verify API V2
• Number Insight API V1
• Number Insight API V2
• Application API
• Numbers API
• Reports API
• IP Addresses
• Firewall Settings
• HTTP Requests

Answer

Generally, we strongly discourage IP allow lists and encourage customers instead to verify callbacks by using Signed Callbacks. Information can be found in our Developer Documentation for SMS API or using this guideline for Messages, Dispatch, and Verify API.

But, if you are restricting inbound traffic, including status reports and delivery receipts, allow the following subnets for each of the services:

SMS API

• 169.50.200.65 -169.50.200.78 (169.50.200.64/28)
• 169.63.86.161 - 169.63.86.174 (169.63.86.160/28)
• 169.50.165.81 - 169.50.165.94 (169.50.165.80/28)
• 119.81.44.1 - 119.81.44.14 (119.81.44.0/28)
• 69.59.249.1 - 69.59.249.254 (69.59.249.0/24)
• 69.59.250.1 - 69.59.250.254 (69.59.250.0/24)
• 69.59.251.1 - 69.59.251.254 (69.59.251.0/24)
• 216.147.0.1 - 216.147.63.254 (216.147.0.0/18)
• 168.100.64.1 - 168.100.127.254 (168.100.64.0/18)

Messages API, Dispatch API, Verify API V1, and Verify API V2

• 169.50.200.65 -169.50.200.78 (169.50.200.64/28)
• 169.63.86.161 - 169.63.86.174 (169.63.86.160/28)
• 119.81.44.1 - 119.81.44.14 (119.81.44.0/28)
• 169.60.146.17 - 169.60.146.30 (169.60.146.16/28)
• 169.50.165.81 - 169.50.165.94 (169.50.165.80/28)
• 5.10.112.113 - 5.10.112.126 (5.10.112.112/28)
• 69.59.247.1 - 69.59.247.254 (69.59.247.0/24)
• 69.59.248.1 - 69.59.248.254 (69.59.248.0/24)
• 69.59.249.1 - 69.59.249.254 (69.59.249.0/24)
• 69.59.250.1 - 69.59.250.254 (69.59.250.0/24)
• 69.59.251.1 - 69.59.251.254 (69.59.251.0/24)
• 216.147.0.1 - 216.147.63.254 (216.147.0.0/18)
• 168.100.64.1 - 168.100.127.254 (168.100.64.0/18)

Please note that the Messages and Dispatch APIs do not support IP allow lists for media.

Numbers API, Application API, Number Insight API V1, and Number Insight API V2

• 168.100.80.0/24

• 168.100.81.0/24

Reports API

If you are using Async and callback requests, you'll need to add the following IP addresses to your allowed list:

• 168.100.80.0/24
• 168.100.81.0/24
• 216.147.0.0/18

Additional Information

Further details on configuring signed callbacks are available here.