ProxySpace

Official list · fetched daily

Cloudflare IP ranges

The ranges Cloudflare connects to origin servers from. Every request that passes through Cloudflare reaches your server from one of these addresses.

IPv4 prefixes

15

IPv4 addresses

1.5M

IPv6 prefixes

7

Networks

1

Format

From the official list: source

Fetched 19 Oct 2026 04:30 UTC

Prefixes

  • 173.245.48.0/20
  • 103.21.244.0/22
  • 103.22.200.0/22
  • 103.31.4.0/22
  • 141.101.64.0/18
  • 108.162.192.0/18
  • 190.93.240.0/20
  • 188.114.96.0/20
  • 197.234.240.0/22
  • 198.41.128.0/17
  • 162.158.0.0/15
  • 104.16.0.0/13
  • 104.24.0.0/14
  • 172.64.0.0/13
  • 131.0.72.0/22
  • 2400:cb00::/32
  • 2606:4700::/32
  • 2803:f800::/32
  • 2405:b500::/32
  • 2405:8100::/32
  • 2a06:98c0::/29
  • 2c0f:f248::/32

What it is for

Lock an origin down so only Cloudflare can reach it, and restore the visitor IP from CF-Connecting-IP.

$curl -s https://proxyspace.pro/ip-ranges/cloudflare.txt
# nginx: trust Cloudflare and restore the real visitor IP
curl -s https://proxyspace.pro/ip-ranges/cloudflare.txt | sed 's/.*/set_real_ip_from &;/' > /etc/nginx/cloudflare.conf
# then in your server block:
#   include /etc/nginx/cloudflare.conf;
#   real_ip_header CF-Connecting-IP;

Cloudflare IP ranges: questions

How many IP addresses does Cloudflare use?

The official list has 15 IPv4 prefixes covering 1,524,736 addresses and 7 IPv6 prefixes.

How often does the Cloudflare IP list change?

ProxySpace fetches it every day. Rules built from it should be refreshed regularly, for example with a daily cron job that downloads the list again.

How do I check whether an IP belongs to Cloudflare?

Download the list and match the address against it, or use the IP lookup tool to see the network (ASN) an address belongs to.

Where are the IP ranges of other networks?

See the IP ranges page for every cloud provider and every country, or the Tailscale page for the 100.64.0.0/10 range.