cloud-ip-ranges

GitHub IP ranges

Current IP ranges (CIDRs) used by the GitHub cloud infrastructure, updated daily.

categorySaaS & Business APIs
websitehttps://github.com
ranges7,367 (5,833 IPv4, 1,534 IPv6)
last change
downloads29,811
download txt csv json — permalinks, always the latest data 
curl -O https://cloud-ip-ranges.com/download/github.txt

Ranges

Sample of 25 of 7,367 ranges. Download the full list above, or check a specific IP.

CIDR Type Region Tag
3.219.87.128/32 ipv4 global actions
4.148.0.0/16 ipv4 global actions
2602:fd5e:1::/63 ipv6 global actions
2602:fd5e:1:2::/64 ipv6 global actions
4.208.26.200/32 ipv4 global api
4.225.11.201/32 ipv4 global api
4.147.189.192/28 ipv4 global codespaces
4.154.216.160/28 ipv4 global codespaces
4.225.11.192/32 ipv4 global copilot
4.228.31.153/32 ipv4 global copilot
4.208.26.198/32 ipv4 global git
4.225.11.200/32 ipv4 global git
20.99.172.64/28 ipv4 global github_enterprise_importer
135.234.59.224/28 ipv4 global github_enterprise_importer
9.234.98.160/28 ipv4 global hooks
9.234.98.176/28 ipv4 global hooks
2606:50c0::/32 ipv6 global hooks
2a0a:a440::/29 ipv6 global hooks
20.51.87.64/28 ipv4 global importer
52.0.228.224/32 ipv4 global importer
4.208.26.196/32 ipv4 global packages
4.225.11.196/32 ipv4 global packages
185.199.108.153/32 ipv4 global pages
2606:50c0:8000::153/128 ipv6 global pages
4.208.26.193/32 ipv4 global web

Blocking GitHub

iptables

curl -sO https://cloud-ip-ranges.com/download/github.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < github.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/github.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < github.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/github-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/github-block.conf << EOF
[github-block]
enabled = true
filter = github-block
action = iptables-allports[name=github]
logpath = /tmp/github.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/github.txt https://cloud-ip-ranges.com/download/github.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/github.txt
# Firewall > Aliases: new alias GITHUB_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=GITHUB_BLOCK

About

These IP ranges are sourced directly from GitHub's official feeds and are updated regularly to ensure accuracy. The data includes IPv4 and IPv6 ranges used by GitHub's infrastructure worldwide. Last update was about 4 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler