Global IP Addresses
This topic provides details on inbound and outbound IP addresses for connectivity with the MFT Automated File Transfer Service across various geographical regions and environments.
If your Organization wishes to provide MFT AFT with local resource access using an IP Ingress (Inbound IP) address trusted listing, ensure that you proceed with caution.
Carefully review and validate these IP addresses before implementation.
Production environments
Azure Central US (Prod) - Public IP addresses
| IP Address | Description |
|---|---|
| 20.236.216.107 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound). |
| 20.236.240.199 | us.thruinc.com |
| 20.236.240.199 | us-sftps.thruinc.com |
| 20.236.240.199 | us-api.thruinc.com |
| 20.118.20.182 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 20.84.192.85 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
Azure UKSouth (Prod) - Public IP addresses
| IP Address | Description |
|---|---|
| 20.108.143.170 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound). |
| 20.108.236.69 | uk.thruinc.com |
| 20.108.236.69 | uk-sftps.thruinc.com |
| 20.108.236.69 | uk-api.thruinc.com |
| 20.108.236.26 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 20.108.143.110 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
Azure GermanyWC (Prod) - Public IP addresses
| IP Address | Description |
|---|---|
| 20.79.212.140 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound). |
| 20.113.41.197 | eu.thruinc.com |
| 20.113.41.197 | eu-sftps.thruinc.com |
| 20.113.41.197 | eu-api.thruinc.com |
| 20.113.55.219 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 20.113.50.148 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
Azure AUS (Prod) - Public IP addresses
| IP Address | Description |
|---|---|
| 20.28.166.126 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound). |
| 20.167.32.5 | au.thruinc.com |
| 20.167.32.5 | au-sftps.thruinc.com |
| 20.167.32.5 | au-api.thruinc.com |
| 20.70.240.194 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 20.227.53.64 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
| 20.227.53.80 | Sftps03 (Only required for FTPS data channel using Passive Open-Jaw) |
AWS Singapore (Prod) - Public IP addresses
AWS Network Load Balancers (NLB) in Singapore use two zonal EIPs (one per AZ) rather than a single VIP like Azure. The customer-facing domains (sg.thruinc.com, sg-sftps.thruinc.com, and sg-api.thruinc.com) CNAME to a multi-AZ NLB and DNS will return one or the other depending on the client. Both IP addresses must be allowlisted for the domains to be reliably reachable.
| IP Address | Description |
|---|---|
| 13.250.131.73 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound) |
| 18.139.244.211 47.128.206.89 | sg.thruinc.com (multi-AZ NLB - both IP addresses must be allowlisted) |
| 18.139.244.221 47.128.206.89 | sg-sftps.thruinc.com (multi-AZ NLB - both IP addresses must be allowlisted) |
| 18.139.224.221 47.128.206.89 | sg-api.thruinc.com (multi-AZ NLB - both IP addresses must be allowlisted) |
| 13.251.39.57 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 18.142.66.63 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
Staging environment
Azure staging - Public IP addresses
| IP Address | Description |
|---|---|
| 20.84.170.178 | To enable MFT to establish a connection using SFTP, FTPS, or HTTPS, customers are required to allowlist the following IP address: Nat Gateway (Outbound). |
| 52.154.253.136 | staging.thruinc.com |
| 52.154.253.136 | staging-sftps.thruinc.com |
| 52.154.253.136 | staging-api.thruinc.com |
| 13.89.113.120 | Sftps01 (Only required for FTPS data channel using Passive Open-Jaw) |
| 52.182.218.158 | Sftps02 (Only required for FTPS data channel using Passive Open-Jaw) |
Recommendations
- Always verify these IP addresses with your network security team before implementation.
- Regularly check for updates to these IP addresses, as cloud infrastructure can change.
- Implement proper firewall rules and monitoring for these IP ranges.
Last Updated: March 2025
