Hello,
Recently I checked cloudflare.com/ips but I found that some IPs are not in the list.
For example 45.85.118.241 or 45.85.119.40 does not exist in any net masks provided.
Thank you
They are not Cloudflare IPs.
% whois 45.85.118.241
% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object
refer: whois.arin.net
inetnum: 45.0.0.0 - 45.255.255.255
organisation: Administered by ARIN
status: LEGACY
whois: whois.arin.net
changed: 1995-01
source: IANA
# whois.arin.net
NetRange: 45.80.0.0 - 45.88.215.255
CIDR: 45.88.128.0/18, 45.88.192.0/20, 45.88.0.0/17, 45.80.0.0/13, 45.88.208.0/21
NetName: RIPE
NetHandle: NET-45-80-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-09-05
Updated: 2021-07-21
Ref: https://rdap.arin.net/registry/ip/45.80.0.0
ResourceLink: https://apps.db.ripe.net/search/query.html
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois://whois.ripe.net
ResourceLink: https://apps.db.ripe.net/search/query.html
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
# whois.ripe.net
inetnum: 45.85.118.0 - 45.85.119.255
netname: GALAKTIKA-20201015
country: EU
org: ORG-GN157-RIPE
admin-c: GN5097-RIPE
tech-c: GN5097-RIPE
status: ASSIGNED PA
mnt-by: LIRSERVICES-MNT
mnt-routes: LIRSERVICES-MNT
created: 2020-10-13T03:09:45Z
last-modified: 2020-10-15T16:30:37Z
source: RIPE
organisation: ORG-GN157-RIPE
org-name: Galaktika N.V.
org-type: OTHER
address: Groot Kwartierweg 10, P.O. Box 423, Willemstad, Curacao
abuse-c: ACRO36142-RIPE
mnt-ref: LIRSERVICES-MNT
mnt-by: LIRSERVICES-MNT
created: 2020-10-15T15:13:47Z
last-modified: 2020-10-15T15:14:04Z
source: RIPE # Filtered
role: Galaktika N.V.
address: Groot Kwartierweg 10, P.O. Box 423, Willemstad, Curacao
nic-hdl: GN5097-RIPE
mnt-by: LIRSERVICES-MNT
created: 2020-10-15T15:15:35Z
last-modified: 2020-10-15T15:15:35Z
source: RIPE # Filtered
% Information related to '45.85.118.0/23AS209242'
route: 45.85.118.0/23
descr: Galaktika N.V.
origin: AS209242
mnt-by: LIRSERVICES-MNT
created: 2020-10-15T16:29:17Z
last-modified: 2020-10-15T16:29:17Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.105 (BUSA)
4 Likes
If it helps:
Cloudflare has IPs for other reasons like WARP, Spectrum, etc. You may see a connection from a Cloudflare IP just being someone on WARP. Those aren’t on that IP List, as they are not used for Cloudflare’s CDN Service.
For that IP Specifically, it looks like some IP Lookup Sites show it as Cloudflare, perhaps because Cloudflare is their upstream (Magic Transit or something, most likely).
2 Likes
That IP range is being announced by Cloudflare’s AS, which means it’s using:
and packets to that range go to Cloudflare servers, but it won’t be used by Cloudflare as an outbound range for customers’ sites.
1 Like
To further clarify… this is a list of IPs that proxied websites should expect to receive requests from and should be allow listed if you use Cloudflare to proxy your website. Cloudflare provides a number of other services which use different IP address ranges (that they own or advertise on behalf of others). Those other IP addresses aren’t intended to be trusted in the same manner as a proxied connection using Cloudflare’s WAF/DDoS services and so aren’t included in that list.
4 Likes
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.