---
name: event-notifications-en-destination-webhook
title: Configuring webhooks as a destination in Event Notifications
description: A webhook represents a service destination, where an incoming notification can be consumed programmatically. For example, an incoming notification about an event can trigger a webhook destination to a backend microservice to act based on the content of the incoming notification.
last-updated: 2026-09-08
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/event-notifications?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Configuring webhooks as a destination in Event Notifications
{: #en-destinations-webhook}

A webhook represents a service destination, where an incoming notification can be consumed programmatically. For example, an incoming notification about an event can trigger a webhook destination to a backend microservice to act based on the content of the incoming notification.
{: shortdesc}

## Configuring a webhook destination
{: #en-webhook-configure}

You can configure a webhook destination on the **Destinations** tab. As part of the configuration, enter the webhook URL, and the REST API verb to be called when the webhook is called. You can also enter authorization headers to the destination webhook. Create a subscription to associate the webhook destination to a topic.

## Supported HTTP verbs
{: #en-supported-verbs}

Event Notifications webhooks support the HTTP verbs GET, POST, PUT, and PATCH.

- GET : Retrieves a representation of the specified resource.
- POST : Creates a new resource.
- PUT : Replaces the entire resource with the provided data.
- PATCH : Applies partial modifications to a resource.

## Webhook signing
{: #en-webhook-sign}

To identify that the incoming notification is coming from IBM Cloud Event Notifications, you can enable webhook signing. If signing is enabled, a public key can be downloaded, and used to decrypt the incoming notification content.

## Allowlisting IP addresses
{: #en-allowlisting}

You can allowlist the IP address ranges to restrict access to the servers that receive webhooks. Ensure that the following IP addresses are all allowlisted:

### Existing webhook IP addresses
{: #en-allowlisting-existing-ips}

These [webhook IP addresses](https://cloud.ibm.com/docs/support?topic=support-webhook-ips&format=markdown) are deprecated at the end of September 2026. After that date, webhooks are no longer delivered from these IP addresses. Ensure that you allowlist the [new IP addresses](#en-allowlisting-new-ips).
{: note}

### New IP addresses
{: #en-allowlisting-new-ips}

Effective starting August 29, 2026:

- **Global common IP addresses**: See [Individual IP addresses for multi-zone regions](https://cloud.ibm.com/docs/support?topic=support-webhook-ips&format=markdown#webhook-ips-individual).

- **Region-specific IP addresses**: Allowlist the IP addresses for the region where your Event Notifications service instance is deployed. If you use Event Notifications service instances in multiple regions, allowlist the IP addresses for each applicable region.

#### Dallas (us-south)
{: #dallas-us-south}

- Public

   ```txt
   52.118.150.206
   52.118.211.163
   67.18.95.240
   ```
   {: codeblock}

- Private

   ```txt
   10.22.12.198
   10.22.26.163
   10.119.56.147
   ```
   {: codeblock}

#### Sydney (au-syd)
{: #sydney-au-syd}

- Public

   ```txt
   159.23.97.10
   130.198.9.234
   135.90.131.19
   ```
   {: codeblock}

- Private

   ```txt
   10.223.237.137
   10.51.176.13
   10.223.253.235
   ```
   {: codeblock}

#### London (eu-gb)
{: #london-eu-gb}

- Public

   ```txt
   158.176.171.145
   158.175.189.21
   141.125.162.123
   ```
   {: codeblock}

- Private

   ```txt
   10.16.48.81
   10.16.62.205
   10.223.21.154
   ```
   {: codeblock}

#### Madrid (eu-es)
{: #madrid-eu-es}

- Public

   ```txt
   13.121.86.163
   13.122.88.117
   13.120.93.85
   ```
   {: codeblock}

- Private

   ```txt
   10.22.177.232
   10.22.195.222
   10.22.202.91
   ```
   {: codeblock}

#### Frankfurt (eu-de)
{: #frankfurt-eu-de}

- Public

   ```txt
   149.81.4.209
   149.81.212.50
   158.176.1.49
   ```
   {: codeblock}

- Private

   ```txt
   10.16.206.123
   10.22.112.128
   10.16.216.36
   ```
   {: codeblock}

#### Osaka (jp-osa)
{: #osaka-jp-osa}

- Public

   ```txt
   163.68.88.77
   163.69.84.115
   163.73.93.115
   ```
   {: codeblock}

- Private

   ```txt
   10.12.21.131
   10.12.33.173
   10.12.38.219
   ```
   {: codeblock}

#### Tokyo (jp-tok)
{: #tokyo-jp-tok}

- Public

   ```txt
   165.192.134.77
   162.133.141.117
   128.168.131.96
   ```
   {: codeblock}

- Private

   ```txt
   10.223.197.48
   10.223.201.138
   10.223.213.141
   ```
   {: codeblock}

#### Toronto (ca-tor)
{: #toronto-ca-tor}

- Public

   ```txt
   163.74.90.220
   163.75.87.40
   163.66.93.241
   ```
   {: codeblock}

- Private

   ```txt
   10.223.149.61
   10.223.166.200
   10.223.182.99
   ```
   {: codeblock}

#### Montreal (ca-mon)
{: #montreal-ca-mon}

- Public

   ```txt
   64.5.42.20
   64.5.48.239
   64.5.44.233
   ```
   {: codeblock}

- Private

   ```txt
   10.46.73.140
   10.46.77.140
   10.46.81.140
   ```
   {: codeblock}

#### Sao Paulo (br-sao)
{: #sao-paulo-br-sao}

- Public

   ```txt
   13.116.82.0
   163.107.92.208
   163.109.92.155
   ```
   {: codeblock}

- Private

   ```txt
   10.12.183.145
   10.12.71.56
   10.51.193.111
   ```
   {: codeblock}

#### Washington DC (us-east)
{: #washington-dc-us-east}

- Public

   ```txt
   52.117.124.52
   169.63.177.17
   150.239.80.160
   ```
   {: codeblock}

- Private

   ```txt
   10.22.41.152
   10.22.50.51
   10.12.118.230
   ```
   {: codeblock}

#### Chennai (in-che)
{: #chennai-in-che}

- Public

   ```txt
   169.38.17.66
   169.38.9.38
   169.38.13.18
   ```
   {: codeblock}

- Private

   ```txt
   10.46.128.179
   10.46.132.179
   10.46.136.179
   ```
   {: codeblock}

#### Mumbai (in-mum)
{: #mumbai-in-mum}

- Public

   ```txt
   169.38.211.191
   169.38.236.49
   169.38.42.162
   ```
   {: codeblock}

- Private

   ```txt
   10.223.94.240
   10.223.103.208
   10.249.119.171
   ```
   {: codeblock}

## Webhook retry policy
{: #en-webhook-retry}

When calling a webhook, issues such as network errors and application glitches can cause the requests to fail. Event Notifications automatically retries failed requests to provide resiliency to external requests.

For detailed information about retry behavior, including retry attempts, delays, and timeout values, see [Retry policy for destinations](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-destination&format=markdown#en-destination-retry-policy).


## Testing a webhook destination configuration
{: #en-webhook-test-destination}

You can test a webhook destination in the options menu. You can test a destination, whether the provided configuration is correct or not with a single click.

For more information on testing a destination, see [Testing Destinations](https://cloud.ibm.com/docs/event-notifications?topic=event-notifications-en-test-destination&format=markdown).