When API calls are made to the NVP/SOAP and REST servers, PayPal strongly recommends that you use Domain Name Service (DNS) results with the default Time To Live (TTL) values, to determine the IP addresses of our servers.

PayPal does not recommend adding IPs to an allow list. If you must allow list the IP addresses for any of these domains, use the following ranges: 

• 64.4.240.0/21
• 64.4.248.0/22
• 66.211.168.0/22
• 91.243.72.0/23
• 173.0.80.0/20
• 185.177.52.0/22
• 192.160.215.0/24
• 198.54.216.0/23

The above IPs are applicable to the following Live and Sandbox endpoints:

Live

API endpoints

• api.paypal.com 
• api-3t.paypal.com 
• svcs.paypal.com 
• Ipnpb.paypal.com

SFTP endpoints

• accounts.paypal.com 
• batch.paypal.com 
• disputes.paypal.com
• dropzone.paypal.com  
• reports.paypal.com

Payflow endpoints

• manager.paypal.com  
• payflowlink.paypal.com  
• payflowpro.paypal.com  
• partnermanager.paypal.com
• payments-reports.paypal.com/reportingengine  
• paypalmanager.paypal.com
• registration.paypal.com
• xml-reg.paypal.com

Informative domain

• notify.paypal.com

Sandbox

API endpoints

• api.sandbox.paypal.com
• api-3t.sandbox.paypal.com
• svcs.sandbox.paypal.com
• Ipnpb.sandbox.paypal.com

FTP endpoints

• accounts.sandbox.paypal.com 
• batch.sandbox.paypal.com 
• disputes.sandbox.paypal.com 
• dropzone.sandbox.paypal.com
• reports.sandbox.paypal.com

Payflow endpoints

• pilot-payflowpro.paypal.com
• pilot-payflowlink.paypal.com
• payments-reports.paypal.com/test-reportingengine

Informative domain

• ipn.sandbox.paypal.com

See also:

• NVP/SOAP API endpoints