Auth0 IP Addresses for Allow Lists
If custom code executing in Auth0 (such as in a rule, hook, or in custom database scripts) must call a service inside your network, or if you configure an on-premise SMTP provider in Auth0, then you may need to configure your firewall to allow inbound traffic from Auth0.
The IP addresses to allow through the firewall are specific to each region. Allow inbound connections from the region-specific set of IP addresses provided when you create an Action, Log Stream, custom database connection, hook, rule, or custom email provider in the Auth0 Dashboard.
Outbound calls
IP addresses are subject to change. In the event of an IP address change, Auth0 sends notifications several months before changes take place. The lists are up-to-date at the time of writing.
When Auth0 makes outbound calls, the IP addresses are static. Auth0 translates internal IP addresses to one of the displayed options when reaching out using NAT.
United States
54.245.16.146, 54.200.12.78, 35.82.131.220, 18.218.26.94, 18.117.64.128, 3.21.254.195, 35.167.74.121, 35.166.202.113, 35.160.3.103, 54.183.64.135, 54.67.77.38, 54.67.15.170, 54.183.204.205, 35.171.156.124, 18.233.90.226, 3.211.189.167, 18.232.225.224, 34.233.19.82, 52.204.128.250, 3.132.201.78, 3.19.44.88, 3.20.244.231
Europe
52.19.3.147, 52.17.111.199, 35.157.198.116, 34.246.118.27, 18.198.229.148, 3.67.233.131, 52.28.56.226, 52.28.45.240, 52.16.224.164, 52.16.193.66, 34.253.4.94, 52.50.106.250, 52.211.56.181, 52.213.38.246, 52.213.74.69, 52.213.216.142, 35.156.51.163, 35.157.221.52, 52.28.184.187, 52.28.212.16, 52.29.176.99, 52.57.230.214, 54.76.184.103, 52.210.122.50, 52.208.95.174
Australia
52.64.84.177, 52.64.111.197, 54.153.131.0, 13.210.52.131, 13.55.232.24, 13.54.254.182, 52.62.91.160, 52.63.36.78, 52.64.120.184, 54.66.205.24, 54.79.46.4
Japan
46.51.243.250, 54.248.192.141, 54.150.87.80
United Kingdom (beta)
18.135.40.36, 3.8.59.62, 3.10.89.10
Inbound calls
IP addresses related to inbound calls to Auth0 may be variable due to the lack of fixed IP addresses on the load balancers. In this case, firewall rules should operate on the name of the service (e.g. <YOUR_TENANT>.auth0.com).
If your Auth0 subscription allows you to configure a self-managed custom domain, you can implement the domain used to reach the service (the custom domain) to have a static IP address. With a self-managed custom domain, you have control over the network entry point and can ensure the static IP address for the custom domain on your side. For information on subscription plans, see Auth0 Pricing.