Merchants who are subject to PCI: DSS rules (i.e. accept cardholder data, then transfer this to us via API) Require our IP’s to be whitelisted.

The following are a full list of possible external IPs (Released March 2019)

• 35.177.14.51 – used for https endpoint

• 18.130.74.95 – used for https endpoint

• 3.8.245.78 – used for callbacks and smtp

• 3.9.11.29

• 35.177.171.202 – used for callbacks and smtp

• 18.130.26.19

note Monek service are protected by cloudflare and ip’s are listed here:

https://www.cloudflare.com/en-gb/ips/