Skip to main content
Newcomer
Dec 14, 2021 11:38 PM UTC
Question

Zoom IP block is blacklisted

The Zoom block 170.114.0.0/16 has recently been blacklisted and is getting blocked by client firewalls that use dynamic malicious lists.

 

I checked this on Spamhaus and it shows up on their PBL as well.

 

Has this not been reported yet?

    6 replies

    Newcomer
    Dec 17, 2021 2:09 AM UTC

    Still being blocked.  Any remedy Zoom?

    Translate
    kelmcbri
    Employee
    Employee
    Dec 30, 2021 8:00 PM UTC

    Any address on the SpamHaus PBL list should be blocked from unauthenticated SMTP traffic. All other traffic is not included in the PBL.  If the address showed up on the SpamHaus DROP list, it should be treated as malicious and all traffic dropped.  170.114.0.0/16 is only showing on the SpamHaus PBL list so Zoom traffic can be safely allowed. 

    Translate
    Newcomer
    Jan 10, 2022 10:43 AM UTC

    We also use Spamhaus DROP and EDROP lists in our firewalls, and get complaints from users who can't connect to Zoom meetings because of that.
    The security policy blocks any traffic to/from any IP listed. No exceptions.

    Translate
    Newcomer
    Jan 11, 2022 6:38 PM UTC

    Running into this same issue as well, please advise. 

    Translate
    kelmcbri
    Employee
    Employee
    Jan 11, 2022 7:01 PM UTC

    Zoom worked with SpamHaus and had 170.114.0.0/16 (and others) delisted yesterday from the SpamHaus PBL list. I'm not aware of any Zoom IPs on the DROP or eDROP lists. Your Zoom clients should be operating properly now. If you are still experiencing trouble, you may want to have your firewall team reset sessions to get the latest SpamHaus list.  I believe the longterm answer is to not filter ALL traffic based on the SpamHaus PBL list - this list is only meant for filtering unauthenticated SMTP (email) traffic.  The SpamHaus DROP list is for malicious IPs where all traffic should be dropped.

    Translate
    Newcomer
    Jul 23, 2025 3:52 AM UTC

    [23/Jul/2025 10:03:14] IPS: Packet drop, severity: Blacklist, Rule ID: 1:2400016 ET DROP Spamhaus DROP Listed Traffic Inbound group 17, proto:ICMP, ip:10.10.43.234 -> 170.114.0.14, type:2 code:2

     

     

    Spamhaus has been blocked Zoom IPs (170.114.0.14)
    please help

    Translate