cloud-ip-ranges

Cloudflare IP ranges

Current IP ranges (CIDRs) used by the Cloudflare cloud infrastructure, updated daily.

categoryCDN & Edge
websitehttps://cloudflare.com
ranges22 (15 IPv4, 7 IPv6)
last change
downloads4,263
download txt csv json — permalinks, always the latest data 
curl -O https://cloud-ip-ranges.com/download/cloudflare.txt

Ranges

Sample of 22 of 22 ranges. Download the full list above, or check a specific IP.

CIDR Type
103.21.244.0/22 ipv4
103.22.200.0/22 ipv4
103.31.4.0/22 ipv4
104.16.0.0/13 ipv4
104.24.0.0/14 ipv4
108.162.192.0/18 ipv4
131.0.72.0/22 ipv4
141.101.64.0/18 ipv4
162.158.0.0/15 ipv4
172.64.0.0/13 ipv4
173.245.48.0/20 ipv4
188.114.96.0/20 ipv4
190.93.240.0/20 ipv4
197.234.240.0/22 ipv4
198.41.128.0/17 ipv4
2400:cb00::/32 ipv6
2405:8100::/32 ipv6
2405:b500::/32 ipv6
2606:4700::/32 ipv6
2803:f800::/32 ipv6
2a06:98c0::/29 ipv6
2c0f:f248::/32 ipv6

Blocking Cloudflare

iptables

curl -sO https://cloud-ip-ranges.com/download/cloudflare.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < cloudflare.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/cloudflare.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < cloudflare.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/cloudflare-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/cloudflare-block.conf << EOF
[cloudflare-block]
enabled = true
filter = cloudflare-block
action = iptables-allports[name=cloudflare]
logpath = /tmp/cloudflare.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/cloudflare.txt https://cloud-ip-ranges.com/download/cloudflare.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/cloudflare.txt
# Firewall > Aliases: new alias CLOUDFLARE_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=CLOUDFLARE_BLOCK

About

These IP ranges are sourced directly from Cloudflare's official feeds and are updated regularly to ensure accuracy. The data includes IPv4 and IPv6 ranges used by Cloudflare's infrastructure worldwide. Last update was about 3 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler