Appendix I: Permitted IP Addresses to access the Avanan Azure Application

When activating protection for Office 365, Avanan installs the Avanan Cloud Security Platform-Emails V2 Azure application in your Microsoft 365 environment.

Avanan uses API calls directed to the Avanan Cloud Security Platform-Emails V2 application to quarantine or restore emails, block users, and perform other actions.

Avanan sends API calls to this application from a specific set of IP networks.

Note:

The administrator must treat access attempts from any other IP addresses as unauthorized and potentially originating from threat actors.

Data Regions and Public IP Addresses

Note:

  • A limitation in Microsoft prevents the application from restricting access to these IP addresses. Avanan recommends using available tools to monitor and alert users of unauthorized access.

  • Avanan may change the list with sufficient notice provided in advance through the product updates blog.

Data Region Public IP address
US
  • 18.205.98.112/32
  • 18.209.206.31/32
  • 18.210.117.69/32
  • 18.213.153.231/32
  • 18.233.42.246/32
  • 18.233.230.110/32
  • 52.203.130.172/32
  • 184.73.16.161/32
Australia
  • 3.105.233.198/32
  • 13.55.67.239/32
  • 13.236.139.38/32
  • 13.236.230.143/32
  • 13.238.33.116/32
  • 13.238.203.5/32
  • 3.24.247.108/32
  • 54.206.57.198/32
Canada
  • 3.98.134.58/32
  • 3.99.86.89/32
  • 15.156.252.195/32
  • 35.182.41.230/32
  • 35.182.206.225/32
  • 52.60.99.220/32
  • 52.60.244.192/32
  • 99.79.92.175/32
Europe
  • 3.252.50.22/32
  • 3.252.50.23/32
  • 3.252.50.24/32
  • 3.252.50.25/32
  • 3.252.50.26/32
  • 3.252.50.27/32
  • 3.252.50.28/32
  • 34.240.80.65/32
India
  • 3.6.250.10/32
  • 3.109.29.21/32
  • 13.126.227.64/32
  • 13.200.211.62/32
  • 13.202.15.143/32
  • 13.202.52.212/32
  • 13.235.12.63/32
  • 43.204.80.178/32
UAE
  • 3.28.79.88/32
  • 3.28.167.79/32
  • 3.29.197.188/32
  • 3.29.205.82/32
  • 40.172.29.94/32
  • 40.172.67.2/32
  • 40.172.71.158/32
  • 51.112.36.44/32
UK
  • 3.10.25.136/32
  • 3.10.90.25/32
  • 3.11.98.163/32
  • 3.11.212.17/32
  • 13.41.113.229/32
  • 13.42.125.75/32
  • 18.170.128.61/32
  • 52.56.244.250/32

Avanan Monitoring Traffic

You may see traffic from the IP address 34.196.171.56 in your logs or access records. The Avanan monitoring infrastructure uses this IP address to perform service health and availability checks. This traffic is expected and can be safely allowed.