cloud-ip-ranges

iCloud Private Relay IP ranges

Current IP ranges (CIDRs) used by the iCloud Private Relay network, updated daily.

categoryVPN & Networks
websitehttps://support.apple.com/en-us/102602
ranges285,091 (41,734 IPv4, 243,357 IPv6)
last change
downloads30,249
download txt csv json — permalinks, always the latest data 
curl -O https://cloud-ip-ranges.com/download/apple.txt

Ranges

Sample of 25 of 285,091 ranges. Download the full list above, or check a specific IP.

CIDR Type Region Tag
104.28.28.0/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.1/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.2/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.3/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.4/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.5/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.6/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.7/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.8/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.9/32 ipv4 AU - AU-NSW, Sydney Access
104.28.28.10/32 ipv4 AU - AU-ACT, Canberra Access
104.28.28.11/32 ipv4 AU - AU-ACT, Canberra Access
104.28.28.12/32 ipv4 AU - AU-QLD, Gold Coast Access
2606:54c0::/45 ipv6 AD - AD-07, Andorra la Vella Access
2606:54c0:8::/45 ipv6 AE - , Access
2606:54c0:10::/45 ipv6 AE - AE-AZ, Abu Dhabi Access
2606:54c0:18::/45 ipv6 AE - AE-DU, Dubai Access
2606:54c0:20::/45 ipv6 AE - AE-SH, Sharjah Access
2606:54c0:28::/45 ipv6 AF - AF-HER, Herat Access
2606:54c0:30::/45 ipv6 AF - AF-KAB, Kabul Access
2606:54c0:38::/45 ipv6 AF - AF-KAN, Kandahar Access
2606:54c0:40::/45 ipv6 AG - , Saint John's Access
2606:54c0:48::/45 ipv6 AI - , The Valley Access
2606:54c0:50::/45 ipv6 AL - AL-11, Tirana Access
2606:54c0:58::/45 ipv6 AM - AM-ER, Yerevan Access

Blocking iCloud Private Relay

iptables

curl -sO https://cloud-ip-ranges.com/download/apple.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < apple.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/apple.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < apple.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/apple-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/apple-block.conf << EOF
[apple-block]
enabled = true
filter = apple-block
action = iptables-allports[name=apple]
logpath = /tmp/apple.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/apple.txt https://cloud-ip-ranges.com/download/apple.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/apple.txt
# Firewall > Aliases: new alias APPLE_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=APPLE_BLOCK

About

These IP ranges cover the iCloud Private Relay network and are updated regularly from its official source. The data includes IPv4 and IPv6 ranges. Last update was about 3 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler