Medallia IP addresses and hostnames

For Medallia's dedicated colocation data centers, Medallia, Inc. maintains exclusive ownership of every public IP address and hostname in our environment. Medallia customers can be confident that communications with Medallia via these addresses happen in a secure manner that prevents communications from being hijacked or re-routed.

For Medallia's Oracle Cloud-based data centers, Medallia, Inc. leverages individual IP addresses assigned by OCI to Medallia. Though rare, IP rotations can occur. Enroll via help.medallia.com to receive Medallia change notifications.

Important: Medallia, Inc. occasionally rotates its IP addresses within dedicated /24 network blocks. If your company designates IP addresses that allow access to your systems, Medallia strongly recommends following the industry-standard practice of designating entire blocks to minimize future changes and down-time. For this reason Medallia does not publish the individual IP addresses of specific hosts.

If you depend on IP addresses, Medallia recommends you check this page quarterly for updates. See Revision history at the bottom of this page for details about updates.

Important: To identify the IP addresses for GovCloud instances, file a support ticket via help.medallia.com to request the information required.

This topic was last updated on 01 February 2024.

Reporting

Some Medallia Web reporting reports use third-party services to enhance reporting. To support Medallia Web reporting reporting, companies need to allow access to the hosts described in Reporting hostnames, below. Custom reports that include non-Medallia, Inc. content, might also need to add company-specific hosts to the Content Security Policy (CSP) for their instance configuration.

Import and export

For import and export access, allow the IP addresses and hosts listed in the data center your company connects to.

MMFT hostnames

We use Medallia Media File Transfer (MMFT) hosts across the globe for bulk file storage. MMFT uses the naming convention filestash.{dc}.medallia.{tld} for the endpoints (on port 22 for SFTP and port 443 for S3), where:

  • {dc} is the Medallia data center abbreviation (“sc4”, “sea1”, “fra1”, etc.).

  • {tld} is the Medallia top-level domain (“com”, “eu”, “com.au”, etc.) for your instance.

Note: Medallia for Digital uses the same CIDR netblocks. However, Medallia for Digital also uses third-party content delivery networks (CDNs) for fast and distributed file resources. When allowing IP addresses for Medallia for Digital, include the IP addresses for the appropriate CDN provider, one of:

  • Akamai — Akamai has tens of thousands of IP addresses that can change. Consult with Akamai for assistance.

  • Fastly — See Accessing Fastly's IP ranges

Reporting hostnames

Add these servers to company firewall allow-lists for users to access Medallia Web reporting reporting. Always use https as the protocol. Failure to include the necessary host(s) can cause blank report pages and 403 Forbidden errors.

URLs to allow (HTTPs for all)

Purpose

Medallia Alchemy Experience Reporting

Classic reports

cdn.medallia.com
cdn.appsol.medallia.com

Medallia's content delivery networks for serving static assets such as JavaScript, CSS, and images.

X X
*.kampyle.com Medallia, Inc. solution for collecting feedback, statistics and metrics on Medallia reporting.X—

metrics-proxy.medallia.ca
metrics-proxy.medallia.eu
metrics-proxy.medallia.com.au
metrics-proxy.medallia.com

Medallia, Inc. solution for collecting performance metrics. Data-center specific.X—
col.eum-appdynamics.com Medallia, Inc. solution for monitoring performance.X—
static.medallia.com

Anti Cheating Engine (ACE) and other resources

XX

bugreport.medallia.com

Bug reports URL

XX

www.google-analytics.com

Google Analytics (fonts, images, script)

X X

fonts.gstatic.com
fonts.googleapis.com

Google Fonts

— X

chart.googleapis.com

Google Charts

— X

cdnjs.cloudflare.com

Codemirror and other JS

— X

maxcdn.bootstrapcdn.com
netdna.bootstrapcdn.com

Bootstrap JS

— X

Survey hostnames

Add these servers to company firewall allow-lists for users to access survey engine production and sandbox instances. Always use https as the protocol. Failure to include the necessary host(s) can cause blank pages and 403 Forbidden errors.

URLs to allow (HTTPs for all)SBX URLs (HTTPs for all)Data centerRegion
survey.medallia.casurveysbx.sbx.can.medallia.caCanada (can) data centerAmericas
survey7.medallia.comsurvey7sbx.sbx.phx1.medallia.comPhoenix (phx1) data centerAmericas
survey3.medallia.com

​​survey-usw1-2.medallia.com

surveysbx.sbx.sea1.medallia.comSeattle (sea1) data centerAmericas
survey.medallia.com

survey-usw1-1.medallia.com

surveysbx.sbx.sc4.medallia.comSanta Clara (us1) data centerAmericas
survey8.medallia.comsurvey8sbx.sbx.hnd1.medallia.comTokyo (hnd1) data centerAPAC
survey9.medallia.comsurvey9sbx.sbx.icn1.medallia.comIncheon (icn1) data centerAPAC
survey4.medallia.comsurvey4sbx.sbx.sin1.medallia.comSingapore (sin1) data centerAPAC
survey.medallia.com.ausurvey.sbx.syd1.medallia.com.auSydney (syd1) data centerAPAC
survey5.medallia.comsurvey5sbx.sbx.jed1.medallia.comJeddah (jed1) data centerEMEA
survey2.medallia.eusurvey2sbx.sbx.fra1.medallia.euFrankfurt (fra1) data centerEurope
survey.medallia.eusurveysbx.sbx.lon.medallia.euUnited Kingdom/Europe (lon) data centerEurope

Amsterdam (ams2) data center

Abbreviationams2
CIDR blocks

147.75.246.0/24

Canada (can) data center

Abbreviationcan
CIDR blocks

147.75.178.0/24
147.75.179.0/24
147.75.248.0/24

Description Host
Email domain to production

express.can.medallia.ca

Email domain to sandbox

sbx.can.medallia.ca

SFTP/FTP Pull import to production feed server feed.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.can.medallia.ca
Import to production SFTPfilestash.can.medallia.ca

Denver (us2) data center

Abbreviationus2 (den)
CIDR blocks

199.102.177.0/24
147.75.252.0/24

Description Host
Email domain to productionexpress.den.medallia.com
Email domain to sandboxsbx.den.medallia.com
SFTP/FTP Pull import to production feed server feed2.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.den.medallia.com
Import to production SFTPfilestash.den.medallia.com

Frankfurt (fra1) data center

Abbreviationfra1
CIDR blocks147.75.180.0/24
DescriptionHost
Email domain to productionexpress.fra1.medallia.eu
Email domain to sandbox express.sbx.fra1.medallia.eu
SFTP/FTP Pull import to production feed serverfeed2.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeed2sbx.sbx.fra1.medallia.eu
Import to production SFTPfilestash.fra1.medallia.eu

Jeddah (jed1) data center

Abbreviationjed1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to Reporting Application & Survey Engine:

    • 144.24.223.222

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 193.122.77.224

  • MMFT (Filestash):

    • 207.127.99.145

  • API GW:

    • 144.24.223.222

  • Sandboxes:

    • 158.101.225.130

DescriptionHost
Email domain to productionexpress5.medallia.com
Email domain to sandbox express5.sbx.medallia.com
Import to production SFTPfilestash.jed1.medallia.com

Incheon (icn1) data center

Abbreviationicn1
CIDR blocksNo CIDR blocks available, individual applications only:

  • Web Access to Reporting Application & Survey Engine:

    146.56.139.229/32

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 146.56.182.143/32

  • MMFT (Filestash):

    • 129.154.198.109

  • API GW:

    • 146.56.139.229

  • Sandboxes:

    • 193.122.123.209

Description Host
Email domain to productionexpress9.medallia.com
Email domain to sandboxexpress.sbx.icn1.medallia.com
SFTP/FTP Pull import to production feed server —
SFTP/FTP Pull import to sandbox feed server—
Import to production SFTPfilestash.icn1.medallia.com

Montreal (yul1) data center

Abbreviationyul1
CIDR blocks147.75.254.0/24
Description Host
Email domain to productionexpress.yul.medallia.ca
Email domain to sandboxexpress.sbx.yul.medallia.ca
SFTP/FTP Pull import to production feed server feed2.medallia.ca
SFTP/FTP Pull import to sandbox feed server feed2sbx.sbx.yul1.medallia.ca

Phoenix (phx1) data center

Abbreviationphx1
IP addressesNo CIDR blocks available, individual applications only:

  • Web Access to Reporting Application & Survey Engine:

    • 129.153.119.44

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 152.70.128.196

  • MMFT (Filestash):

    • 129.153.118.154

  • API GW:

    • 129.153.119.44

  • Sandboxes:

    • 129.146.175.57

DescriptionHost
Email domain to productionexpress7.medallia.com
Email domain to sandboxexpress7.sbx.medallia.com
Import to production SFTPfilestash.phx1.medallia.com

Santa Clara (us1) data center

Abbreviationus1 (sc4)
CIDR blocks147.75.251.0/24

199.102.178.0/24

Description Host
Email domain to productionexpress.medallia.com
Email domain to sandboxsbx.sc4.medallia.com
SFTP/FTP Pull import to production feed server feed.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.sc4.medallia.com
Import to production SFTPfilestash.sc4.medallia.com

Seattle (sea1) data center

Abbreviationsea1
CIDR blocks

147.75.243.0/24

Description Host
Email domain to productionexpress.sea1.medallia.com
Email domain to sandboxexpress.sbx.sea1.medallia.com
SFTP/FTP Pull import to production feed server feed3.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed3sbx.sbx.sea1.medallia.com
Import to production SFTPfilestash.sea1.medallia.com

Singapore (sin1) data center

Abbreviationsin1
CIDR blocks

147.75.176.0/24

Description Host
Email domain to productionexpress.sin1.medallia.com
Email domain to sandboxexpress.sbx.sin1.medallia.com
SFTP/FTP Pull import to production feed server feed4.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed4sbx.sbx.sin1.medallia.com
Import to production SFTPfilestash.sin1.medallia.com

Sydney (syd1) data center

Abbreviationsyd1
CIDR blocks147.75.247.0/24
Description Host
Email domain to productionexpress2.syd1.medallia.com.au
Email domain to sandboxexpress.sbx.syd1.medallia.com.au
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.syd1.medallia.com.au
Import to production SFTPfilestash.syd1.medallia.com.au

Tokyo (hnd1) data center

Abbreviationhnd1
IP addressesNo CIDR blocks available, individual applications only:

  • Web Access to Reporting Application & Survey Engine:

    • 150.230.210.102

  • Exports from or feed pulls (to/from client server) by Reporting Application:

    • 150.230.98.45

  • MMFT (Filestash):

    • 152.70.111.183

  • API GW:

    • 150.230.210.102

  • Sandboxes:

    • 150.230.192.103

DescriptionHost
Email domain to productionexpress8.medallia.com
Email domain to sandboxexpress8.sbx.medallia.com
Import to production SFTPfilestash.hnd1.medallia.com

United Kingdom/Europe (lon) data center

Abbreviationlon
CIDR blocks

199.102.176.0/24
147.75.249.0/24

Description Host
Email domain to production

express.medallia.eu

Email domain to sandbox

sbx.lon.medallia.eu

SFTP/FTP Pull import to production feed server feed.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.lon.medallia.eu
Import to production SFTPfilestash.lon.medallia.eu

Revision history

Revisions made to this topic.

Revision dateRevisions
01 Feb 2024Added Incheon (icn1) email domain to production and the email domain to sandbox environments.
24 Oct 2023Updated Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers' MMFT IP addresses.
20 Oct 2023Added Frankfurt (fra1) SFTP/FTP Pull import to sandbox feed server hostname.
29 Aug 2023Added survey hostnames for Seattle (sea1) and Santa Clara (us1) data centers.
08 Aug 2023Added sandboxes IP addresses for Jeddah (jed1), Incheon (icn1), Phoenix (phx1), and Tokyo (hnd1) data centers. Added note stating some IP addresses for Jeddah are changing on 23 Aug 2023.
29 Jun 2023Updated Web Access to Reporting Application and Survey Engine IP address for Jeddah (jed1), Phoenix (phx1), and Tokyo (hnd1) data centers.
26 Jun 2023Added paragraph for Oracle Cloud-based data centers.
16 Jun 2023Added note for GovCloud instances.
01 Mar 2023Updated Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), Incheon (icn1) to add Filestash and API gateway IP addresses.
16 Feb 2023Added Incheon (icn1) data center.
06 Dec 2022Consolidated all survey hostnames to this topic.
17 Nov 2022Removed deprecated mft and sftp1 FTP/SFTP servers and all SMTP IP address listings.
20 Sep 2022Removed Germany (ger) data center; added email host names for Frankfurt (fra1), Jeddah (jed1), Phoenix (phx1), Tokyo (hnd1), and Sydney (syd1).
13 Sep 2022Updated Phoenix (phx1) production email host.
01 Aug 2022Added Tokyo (hnd1) data center.
06 Apr 2022Added Frankfurt (fra1) SFTP/FTP Pull import to production feed server hostname.
02 Mar 2022Added Phoenix (phx1) data center.
02 Feb 2022Added Jeddah (jed1) and Frankfurt (fra1) data centers. Updated Canada (can), Denver (us2), Santa Clara (us1), Singapore (sin1), and United Kingdom/Europe (lon) to add server names.
17 Jan 2022Corrected London sandbox feed server hostname.
20 Sep 2021Added 147.75.180.0/24 to Germany (ger) data center.
20 Nov 2020Added Singapore (sin1) data center. Updated Montreal (yul) to add server names.
17 Jul 2020Consolidated all hostnames to this topic, and incorporated inclusive terminology to say "allow list" instead of "whitelist".