cloud-ip-ranges

Salesforce IP ranges

Current IP ranges (CIDRs) used by the Salesforce cloud infrastructure, updated daily.

categorySaaS & Business APIs
websitehttps://www.salesforce.com
ranges59 (54 IPv4, 5 IPv6)
last change
downloads319
download txt csv json — permalinks, always the latest data
curl -O https://cloud-ip-ranges.com/download/salesforce.txt

Ranges

Sample of 25 of 59 ranges. Download the full list above, or check a specific IP.

CIDR Type Tag
13.108.0.0/15 ipv4 AS14340
13.110.0.0/16 ipv4 AS14340
13.111.0.0/16 ipv4 AS14340
66.231.80.0/20 ipv4 AS14340
68.232.192.0/20 ipv4 AS14340
2401:ce80::/32 ipv6 AS14340
2605:6180::/32 ipv6 AS14340
2a03:5d60::/32 ipv6 AS14340
64.132.88.0/24 ipv4 AS22606
64.132.89.0/24 ipv4 AS22606
64.132.92.0/24 ipv4 AS22606
207.67.38.0/24 ipv4 AS22606
207.250.68.0/24 ipv4 AS22606
66.203.114.0/24 ipv4 AS393517
104.161.232.0/24 ipv4 AS394808
104.161.233.0/24 ipv4 AS394808
104.161.234.0/24 ipv4 AS394808
104.161.235.0/24 ipv4 AS394808
104.161.252.0/24 ipv4 AS394808
66.203.115.0/24 ipv4 AS396417
104.161.242.0/23 ipv4 AS396417
104.161.244.0/23 ipv4 AS396417
104.161.246.0/23 ipv4 AS396417
2401:ce80:1000::/48 ipv6 AS396417
2401:ce80:1001::/48 ipv6 AS396417

Blocking Salesforce

iptables

curl -sO https://cloud-ip-ranges.com/download/salesforce.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < salesforce.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/salesforce.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < salesforce.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/salesforce-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/salesforce-block.conf << EOF
[salesforce-block]
enabled = true
filter = salesforce-block
action = iptables-allports[name=salesforce]
logpath = /tmp/salesforce.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/salesforce.txt https://cloud-ip-ranges.com/download/salesforce.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/salesforce.txt
# Firewall > Aliases: new alias SALESFORCE_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=SALESFORCE_BLOCK

About

These IP ranges are sourced directly from Salesforce's official feeds and are updated regularly to ensure accuracy. The data includes IPv4 and IPv6 ranges used by Salesforce's infrastructure worldwide. Last update was 10 minutes ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler