After finally getting into the dashboard which took more than a minute to load it was impossible to add “Allow IP addresses”.
Nothing is properly tested and nothing really; it’s slow and dysfunctional. Microsoft’s policy keeping things buggy is definitely well executed.
Within “Microsoft Defender” if you can get into it and try to add “Allow IP Addresses” you will find it impossible.
Another post we made actually showed error messages but this time; no error messages just impossible to add the IP addresses you want to whitelist.
https://www.mutface.com/microsoft-defenfer-problems-dysfunctional-and-not-user-friendly/
Even when I try to hack it using CURL to the API endpoint it still doesn’t work:-
-H ‘authority: security.microsoft.com’ \
-H ‘accept: application/json, text/plain, */*’ \
-H ‘accept-language: en-GB,en-US;q=0.9,en;q=0.8,zh-TW;q=0.7,zh;q=0.6’ \
-H ‘cache-control: no-cache’ \
-H ‘content-type: application/json’ \
-H ‘cookie: MC1=GUID=fd34b71e06e945afa04f5d6261bd125c&HASH=fd34&LV=202412&V=4&LU=1733906464101; MUID=219C7AD7FD59600338486E88FC69615A; s.SessID=104ca566-0d1a-43a0-a324-97898c04b189; X-PortalEndpoint-RouteKey=seaprod_southeastasia_aks; sccauth=QtG4e0nIdsrLifvcoh4FbXPUkYI8MEB6WlUpQDo3Gxp2xxhSqkyzoAm4bRIshD_H0OJ9EYdr0SfucBxef9UOYvarY6fW98iu8yySjyMlNZHSQM10Vq4jw0RQeLcbgvc2vG96JnPWlB29rntRXhhSi38G2Lvz7zWcNs4bBwOkPeDxzVfSy2eaFkHeD2_1kFkq1rgDwpbiNvBSOwmD_xm3OHvYCRz633IcbstlwsrkwlOtCX33jxM5LXgihI2Dx1mwi6u7RDoVW_jcriIEXU33kHY3B4pYJXZxmfi4fOA5sW0m_dTow87Ld4e0wDJwh7e5069gSybybpO24jwVwAOGJBmEPi6yaqhU6Ps4lfkc_z3jI7QgGwXFmQv2tYF1AnBypD7suM1hq97ylFjnEfxI4hGy6lZi1_3-1b9AAKnVyG69PIhEmB7avqolOxcgDZmgkimXyYdnyr5AIhKGpzKX75A-hakfLHu5SSDwza5X8zN2mdC0uJ-xXw_rxLA0-iTyvZ0xFYGSWOfg6kNYEuLZw8PWZCEup4UxelWuzzLNYHbzeoPuR8061gFgjGdSI0EZEeCBHbg2lRWQY_3833lYFAX157oQfiQ89z5aLE44929kGAoN7C1x2tn2TQghNoR8F2fggKG1oRu3SY5GbSw4SRmQ-_fgsVrq_-Cl_KV85NoDPTt9eK1KZaOh6y13RDbMvs9R_7znY1D1sUCeQmKQjWaLDqMj6doWNnedSFD9ztIqOKDGZHnkJtkAukhSD-BVmZeK4z0VO3hoUAea4C4vU6SH8ySxGggc0isCh2wVK7xBUgaulZMZicRmFtpVs9ogsOuNEu1qu31U0nscXjYr0Qqc5D-EXPrgcg8YYz87KauVX0v79LPrp0lxrB79wmuV0A3E7Ni-YQee-jd_GWdZjxwEzoMEOYcokunJF-zryT9_UykG2mxPjBesgk9hPaqG_6OiG8Z2OewEbZOgRsTQ5fZjUS_5NHKz9yQzjoCE1-vHS5VrXcr1UpjcMxeJhfcwMGFbibJ7Hpt3z4fjfA9geDp-CBe0KVk2Hq0RYLPOC3PGHeGgRs-3q2be_pjFzJgd24Vj7jNE73sNIlN1D165BVrtSSn7KFaPSptqcroPwnyeQQXH4gKbOlPmTAB8B9LbOT44uCne28kzlcI1ZnJb63Qf0XUkuoyU3P_dU8CKQqZp4BQtYHW4u2mgiYqdqQ1UkdbRVxHjcRwnAjPxwOJpi2oDjRKkYw1SaZlAWf-VHnzQZKsryvDmKd1ySEmH0oLpjNwpHXTmV2CLJ5hQk2Zd4fRbAiw9rGJFpbn9Aepq0qotlp-QAYDQLz_WOQAdCoSTtc1LXJ2Cn2GQkzNAy6elWxHy7Fa6uYW7YE31XeZTbbj-lzQQvI8EhB53j2HYPUXHvaUkgIgpE6fd5I28IQoS6c9lZH_ljUBySSS4KAUMoeUyz7LqHFnnWLfj-L0SFm_hpsFejjIP5YcwiTwcUbWGripwSf2r6Gsx6cUh7szFbHi20ChccVRl9rN9RG22h35U7LYZPvrVeki7clObVMLmXPrcBN2jdQp0pMEMosKgnJg5kUwI-W0An0UD51aq9UQYVufl2iI_6LpFjnuRMmCuNCi2-Ljq1BoUAP6f7yI_Uiri69gkdYEu1CKfwfLWUYe1hWn_sQXqwg1ziE7_VqwAuRPyyM5j5y4YKOLvWToBP2fiTRg2byf857w_R49du-1TmPd269L7Fack3Q2iOKZvTlBjWhFJoUeJ7ab0Szl4-oqoVqRSsH-x4bSEGSO06VWOYzgJG_qT6jSG1HL7m25JEuf35wYtNmIdQ0LtCTLfiOlR7Cfn9YxZhj6IxPckE3i8f58VtnDmXlYeCBQGLIBM_zR7Xs0ilWozQ2w82WTMOU5RoLJzVJsQe2ZUQNlxeIvdinIWaKCDYHIC5OYreCrXTsEanrOko425Ape4jP1o38mJiofClaT3etJnAbP7FS_Kwtg-C9hsyj9svwcr_gh3A617L2yScdUoGcODGpmYg2GeRRd86toKnEqjKbR7YyoeRb3MoWFy4DfeLE83D6pV3HYnXw93Z3WrsB5x3BELLZdyMM5MbXi2s5wOZYI93TS8soxQlYLbgVp17uyQN_PLc4S0preJPrL2VkrLw0GcS6bkG7j4WqgmchAbwCpzmqWA; s.Flight=; ai_user=tboyOy2lgcRBGE7w8HF3Tk|2025-04-26T08:40:12.272Z; SSR=1745656826379; MicrosoftApplicationsTelemetryDeviceId=48226ce8-c6f6-4fcf-acdf-80ed4a1823e0; XSRF-TOKEN=LywCP2zdLHt_vSi3nskKqHgyW21VPyvy6n-KvTNPXWnb-90K2wsXajVILBeBsoeMuC_9XKo7ex42URdJBg0q1xeZmcG6-dXByQQg56GbCzq7vpYAh8__lahy1QRNtjeNjna6I6Jgrf_fUV01B9HI8g2%3A-Ct5RAmO7Q5vyGJDDKDwZKE8Muwh9Q9MGTUNnDgXZNtLXXCLDxyKq_6_NihLhVAzbhSqanei-EQ-ghX4eZoSX778zmH7MVk4GN7QCQIrsozwfUpKzRsJU1mxpO51a8LpqjqXMaBZnPEFQ2GrY-6ao_3qaygFwtyrI2VqPjpjaL5mKKrNrsOVPn3OuyIZsQka0; ai_session=UL5Xba5KRmO0OcFUPOgK3R|1745678848492|1745679854747’ \
-H ‘dnt: 1’ \
-H ‘origin: https://security.microsoft.com’ \
-H ‘pragma: no-cache’ \
-H ‘referer: https://security.microsoft.com/tenantAllowBlockList?viewid=Sender&tid=b2804199-b13b-42e7-8480-3fb72bbc7501’ \
-H ‘request-context: appId=cid-v1:24b64180-172a-4f78-a057-708a336e0df1’ \
-H ‘request-id: |d8186f3a0863487db8196f758d7b050b.b3e960ea2d89428a’ \
-H ‘sec-ch-ua: “Not)A;Brand”;v=”24″, “Chromium”;v=”116″‘ \
-H ‘sec-ch-ua-mobile: ?0’ \
-H ‘sec-ch-ua-platform: “macOS”‘ \
-H ‘sec-fetch-dest: empty’ \
-H ‘sec-fetch-mode: cors’ \
-H ‘sec-fetch-site: same-origin’ \
-H ‘user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36’ \
-H ‘x-clientpage: tenantAllowBlockList@antispam’ \
-H ‘x-clientpkgversion: 17.01.3130.007’ \
-H ‘x-servicetype: Exo’ \
-H ‘x-tabvisible: visible’ \
-H ‘x-tid: b2804199-b13b-42e7-8480-3fb72bbc7501’ \
-H ‘x-xsrf-token: LywCP2zdLHt_vSi3nskKqHgyW21VPyvy6n-KvTNPXWnb-90K2wsXajVILBeBsoeMuC_9XKo7ex42URdJBg0q1xeZmcG6-dXByQQg56GbCzq7vpYAh8__lahy1QRNtjeNjna6I6Jgrf_fUV01B9HI8g2:-Ct5RAmO7Q5vyGJDDKDwZKE8Muwh9Q9MGTUNnDgXZNtLXXCLDxyKq_6_NihLhVAzbhSqanei-EQ-ghX4eZoSX778zmH7MVk4GN7QCQIrsozwfUpKzRsJU1mxpO51a8LpqjqXMaBZnPEFQ2GrY-6ao_3qaygFwtyrI2VqPjpjaL5mKKrNrsOVPn3OuyIZsQka0’ \
–data-raw ‘{“CmdletInput”:{“CmdletName”:”New-TenantAllowBlockListItems”,”Parameters”:{“Entries”:[“216.239.233.163″],”ExpirationDate”:”2028-05-25T17:00:00.000Z”,”Notes”:””,”ListType”:”IP”,”Allow”:”true”,”OutputJson”:”true”}}}’ \
–compressed
I get a positive response but it still doesn’t show up:-
{"@odata.context":"https://outlook.office365.com/adminapi/Beta/b2804199-b13b-42e7-8480-3fb72bbc7501/$metadata#Collection(Exchange.GenericHashTable)","adminapi.warnings@odata.type":"#Collection(String)","@adminapi.warnings":[],"value":[{"LastUsedDate":null,"Error":null,"Identity":"","Value":"[{\"LastUsedDate\":null,\"Error\":{\"Code\":\"ErrorInvalidValue\",\"Message\":\"IPv4 address not supported.\"},\"Identity\":\"\",\"Value\":\"216.239.233.163\",\"Action\":0,\"Notes\":null,\"SubmissionID\":null,\"ListSubType\":null,\"SysManaged\":null,\"LastModifiedDateTime\":null,\"ExpirationDate\":null,\"ObjectState\":\"New\",\"EntryValueHash\":null,\"ModifiedBy\":null,\"RemoveAfter\":null,\"CreatedDateTime\":null}]","Action":"0","Notes":null,"SubmissionID":null,"ListSubType":null,"SysManaged":null,"LastModifiedDateTime":null,"ExpirationDate":null,"ObjectState":"Unchanged","EntryValueHash":null,"ModifiedBy":null,"LastUsedDate(DateTime])":null,"RemoveAfter":null,"CreatedDateTime":null}]}%
