Defender ATP public IP addresses

Question

Does anybody know the IP addresses Microsoft uses for their Defender ATP Service?

I can find the associated domain names but not a reliable source of the IP addresses being used.

score 2 · Answer 1 · answered Apr 10 '19 at 17:46

2

Name based only.

Those are hosted on Azure public cloud, note azure.com and blob.core.windows.net names. You can assume they won't be in a static subnet, let alone have static IP addresses.

answered Apr 10 '19 at 17:46

John Mahowald

30,009
1
17
32

I've found an downloadable XML file Microsoft provides, containing all their public Azure IP addresses: https://www.microsoft.com/en-us/download/details.aspx?id=41653 – TobyU Apr 12 '19 at 09:26

score 0 · Accepted Answer · answered Apr 12 '19 at 09:09

0

Microsoft provides an XML file to download with their public Azure IP addresses: https://www.microsoft.com/en-us/download/details.aspx?id=41653

These IPs can change from time to time as said by John Mahowald.

answered Apr 12 '19 at 09:09

TobyU

191
2
8

Defender ATP public IP addresses

2 Answers2