We are moving Blackbaud Payment Service™, Blackbaud Merchant Services™, and Blackbaud Checkout (formerly Blackbaud Secure Payments™) to Blackbaud SKY™, our modern, integrated, and open cloud on February 11th, 2018. If your organization’s applications are not hosted by Blackbaud, please confirm access to the below hostnames. If your applications are hosted by Blackbaud, no action is needed.

In order to access the Blackbaud Payment Service, Blackbaud Merchant Services Portal, and Blackbaud Checkout, please allow all inbound and outbound traffic to the following hostnames:

  • payment.service.blackbaudhost.com
  • bbms.blackbaud.com
  • sky.blackbaudcdn.net
  • payments.blackbaud.com

We recommend using hostname based firewall rules. If you are unable to use the hostnames above, please allow traffic for the IP addresses below. If you encounter issues accessing the BBMS web portal or while using functionality within the portal, you may need to allow the IPs for Blackbaud SKY in Amazon Web Services (AWS). For Blackbaud SKY in AWS information, please refer to the documentation here
 
  • 205.139.108.79 Port 443
  • 216.32.151.248 Port 443
  • 205.139.106.252
  • 216.32.151.252
  • 205.139.106.154
  • 216.32.151.254
  • Starting February 11th, 2018, you must also allow all traffic from the IP addresses utilized by Incapsula. Incapsula is a third party service utilized by Blackbaud for networking purposes, and all Incapsula IP addresses documented here must be allowed. If you use the host names above rather than IPs, no additional action is needed. The Incapsula IPs are automatically included in the hostnames above. 
Note: Throughout this article, we have provided links to third-party websites. We provide links to third-party websites in an effort to help you resolve your issue. We are not responsible for the information on third-party websites, and we cannot assist in implementing the solutions on these websites.
If you are unable to connect to BBPS after updating the firewall, please follow these steps:
  1. Ping BBPS (payment.service.blackbaudhost.com) from the machine encountering the issue. You should receive the Incapsula IP address. If you receive the old IP address, proceed to Step 2.
  2. Flush the DNS
  3. Check the hosts file.  It’s possible the machine has been hardcoded to connect to BBPS on the old IP.