Samsung Device Whitelisting Guide

Last updated: August 8, 2026

What domains and IP addresses do I need to whitelist for my Samsung Tizen devices to work properly?

The table below lists the essential whitelisting options for your GRUBBRR kiosk.

Address(es)	Ports	Function
portal.grubbrr.com	80 443	Allows the kiosk to download data from and upload data to the GRUBBRR Portal
pushy.me sockjs-us2.pusher.com	80 443	Allows the kiosk to receive notifications from the GRUBBRR Portal
*.samsungqbe.com 23.62.46.116 23.62.46.119 50.17.7.32 54.162.159.37 54.237.106.192 34.160.215.19 18.140.79.177 18.138.183.195 52.12.66.253 52.12.93.31 3.33.227.249 15.197.205.27 http://grubbrr.samsungcms.com/ remote-device.samsungcms.com remote.samsungcms.com 3.168.88.61 44.235.172.254 44.240.15.69 35.167.33.46 44.241.9.194 44.240.15.69 44.235.172.254 18.239.194.3 34.241.91.236 54.154.12.37 20.114.67.142 wp.greenwichmeantime.com	80 443 3030 7002 7001 8000 8001 8002	Allows GRUBBRR support to provide remote assistance to the kiosk using MagicInfo, and allows the kiosk to automatically track the correct time.
dmzc1d1w1k5f.cloudfront.net s3-website-us-east-1.amazonaws.com s3.us-east-1.amazonaws.com tizen-builds.s3.amazonaws.com tizen-builds.s3.us-east-1.amazonaws.com 16.182.0.0/16 18.34.0.0/19 18.34.232.0/21 3.5.0.0/19 44.192.134.240/28 44.192.140.64/28 52.216.0.0/15 52.217.0.0/16 54.231.0.0/16 13.248.224.0/24 13.248.225.0/24 13.248.226.0/24 13.248.227.0/24 13.248.228.0/24 13.248.229.0/24 13.248.230.0/24 13.248.231.0/24 13.248.232.0/24 13.248.233.0/24 2600:1f68:8000::/39 2600:1fa0:8000::/39 2600:1ff0:8000::/39 2600:1ff8:8000::/40 2600:1ff9:8000::/40 2600:1ffa:8000::/40 3.5.0.0/19 76.223.100.0/24 76.223.101.0/24 76.223.102.0/24 76.223.103.0/24 76.223.104.0/24 76.223.95.0/24 76.223.96.0/24 76.223.97.0/24 76.223.98.0/24 76.223.99.0/24	80 443 4195	Allows the kiosk to download updated software versions from application storage servers, and communicate with media storage servers.
ik.imagekit.io	80 443	Allows the kiosk to communicate with media storage servers. These host the kiosk screensavers, images, and other UI elements of the kiosk software.
38.67.17.0/26 209.172.201.0/26 66.209.76.192/26 66.209.75.128/26 104.153.8.0/21 104.153.8.0/21 .shift4.com .lh.shift4.com‡ .dollarsonthenet.net .shift4api.net .4res.net .privatelabelcard.com .i4go.com .4tresspos.com *.assets.shift4.com§ https://myportal.shift4.com/ https://coreapi.4tresspos.com/ https://in4mapi.4tresspos.com/ https://s4-myportal.s3.amazonaws.com/ https://wwimdmwghg.execute-api.us-west-2.amazonaws.com/s4 https://a1-commandcenter.s3.us-west-2.amazonaws.com/ https://shift4-cc-public-prod.s3.us-west-2.amazonaws.com/	80 443 26880 26881	Required for clients who will use Shift4 payment devices with their Samsung Kiosk; other payment processors do not need to whitelist these addresses For Shift4, the Kiosk and your UTG server must be on the same local network, and you will need to have your IT provider set up a trust relationship for your Kiosk.