Skip to main content

Defender ATP public IP addresses [Resolved]

Does anybody know the IP addresses Microsoft uses for their Defender ATP Service?

I can find the associated domain names but not a reliable source of the IP addresses being used.

Question Credit: TobyU
Question Reference
Asked April 14, 2019
Posted Under: Network
2 Answers

Microsoft provides an XML file to download with their public Azure IP addresses:

These IPs can change from time to time as said by John Mahowald.

credit: TobyU
Answered April 14, 2019

Name based only.

Those are hosted on Azure public cloud, note and names. You can assume they won't be in a static subnet, let alone have static IP addresses.

credit: John Mahowald
Answered April 14, 2019
Your Answer