cloud-ip-ranges

Zscaler IP ranges

Current IP ranges (CIDRs) used by the Zscaler network, updated daily.

categoryVPN & Networks
websitehttps://zscaler.com
ranges852 (672 IPv4, 180 IPv6)
last change
downloads29,234
download txt csv json — permalinks, always the latest data 
curl -O https://cloud-ip-ranges.com/download/zscaler.txt

Ranges

Sample of 25 of 852 ranges. Download the full list above, or check a specific IP.

CIDR Type Region Tag
137.31.28.0/23 ipv4 EMEA Amsterdam II
220.243.158.0/24 ipv4 APAC Beijing III
137.31.102.0/23 ipv4 Americas Buenos Aires II
2605:4300:e800::/40 ipv6 Americas Buenos Aires II
175.107.180.0/23 ipv4 APAC Canberra I
137.31.114.0/23 ipv4 Americas Chicago
137.31.116.0/23 ipv4 Americas Chicago II
58.220.95.0/24 ipv4 APAC city
2400:7aa0:1200::/40 ipv6 APAC city
137.31.160.0/23 ipv4 Americas Dallas II
137.31.94.0/23 ipv4 EMEA Dusseldorf I
137.31.80.0/21 ipv4 Americas Honolulu I
2605:4300:3d00::/40 ipv6 Americas Honolulu I
122.10.149.0/24 ipv4 APAC Jakarta I
128.1.68.0/23 ipv4 APAC Manila I
2602:ffe4:c4f:1000::/64 ipv6 APAC Manila I
198.14.104.0/23 ipv4 Americas Montreal I
137.31.136.0/23 ipv4 APAC Mumbai VI
159.254.212.0/22 ipv4 EMEA Munich I
137.31.198.0/23 ipv4 Americas Philadelphia I
2605:4300:3e00::/40 ipv6 Americas Philadelphia I
198.14.106.0/23 ipv4 Americas Seattle
137.31.142.0/23 ipv4 APAC Singapore IV
87.58.73.24/32 ipv4 global svpn
2400:7aa0:1211::1a/128 ipv6 global svpn

Blocking Zscaler

iptables

curl -sO https://cloud-ip-ranges.com/download/zscaler.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < zscaler.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/zscaler.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < zscaler.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/zscaler-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/zscaler-block.conf << EOF
[zscaler-block]
enabled = true
filter = zscaler-block
action = iptables-allports[name=zscaler]
logpath = /tmp/zscaler.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/zscaler.txt https://cloud-ip-ranges.com/download/zscaler.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/zscaler.txt
# Firewall > Aliases: new alias ZSCALER_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=ZSCALER_BLOCK

About

These IP ranges cover the Zscaler network and are updated regularly from its official source. The data includes IPv4 and IPv6 ranges. Last update was about 3 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom