37

I am looking for an authoritative list of IP space Facebook uses. I need this to support a locked down developer environment that has very tight restrictions on outbound connectivity.

Today I found api and graph.facebook.com started resolving to 69.171.224.0/19 which was not previously in my filters. I've updated it but I'd like to know what other IP space I'm missing allow rules for.

Here's what I have currently. Any additional IP blocks you can list out would be great. Thanks everyone.

69.63.176.0/20
69.171.224.0/19
66.220.144.0/20
204.15.20.0/22
rav_kr
  • 434
  • 8
  • 16
Censored P. Censored
  • 594
  • 1
  • 5
  • 11
  • 1
    Thanks !, I needed it for the complete opposite: re-route all facebook traffic to my VPN in obfs3 or ssh. With some chance, your jailed devs could have good use of the answers here to do the same ! – vaab Oct 14 '14 at 11:59

3 Answers3

73

The list from 2020-05-23 is:

31.13.24.0/21
31.13.64.0/18
45.64.40.0/22
66.220.144.0/20
69.63.176.0/20
69.171.224.0/19
74.119.76.0/22
102.132.96.0/20
103.4.96.0/22
129.134.0.0/16
147.75.208.0/20
157.240.0.0/16
173.252.64.0/18
179.60.192.0/22
185.60.216.0/22
185.89.216.0/22
199.201.64.0/22
204.15.20.0/22

The method to fetch this list is already documented on Facebook's Developer site, you can make a whois call to see all IPs assigned to Facebook:

whois -h whois.radb.net -- '-i origin AS32934' | grep ^route
Sinder
  • 241
  • 1
  • 11
Igy
  • 43,571
  • 8
  • 87
  • 115
  • Thanks Igy! The developer site isn't that easy to find stuff on. I did perform due diligence on searching for this before posting! :) I also assumed they would have more than one AS - if they don't, even better. – Censored P. Censored Jun 22 '12 at 22:35
  • 1
    I think it's just that one AS; at least, that's the one we've documented and given out to partners when asked – Igy Jun 23 '12 at 07:16
  • 1
    I created a PHP page that simply outputs the results of your whois command at http://dannyneumann.com/util/facebook_ips.php . That URL is not guaranteed to last forever, so use with caution. – Slothario Dec 29 '14 at 18:09
  • how did you manage to short the list of facebook IP classes ? I opened a thread about it http://stackoverflow.com/questions/33801589/how-to-shrink-consecutive-b-ip-classes-in-bigger-one I would love an answer ... PLEASE ;) – THESorcerer Nov 19 '15 at 14:01
  • That list was provided by our network team, sorry, but I'm not sure how to easily compute that summary from the full whois response for the AS – Igy Nov 20 '15 at 02:25
  • I wondered where to get **AS32934** from. Here I found it [here](https://gist.github.com/normoes/829d65866c8bf6d32b13f020479b172b). – rocksteady Apr 11 '19 at 07:21
11
# Bloqueio facebook
for ip in `whois -h whois.radb.net '!gAS32934' | grep /`
do
  iptables -A FORWARD -p all -d $ip -j REJECT
done
Alex Teixeira
  • 148
  • 1
  • 5
5

Updated list as of 6/11/2013

204.15.20.0/22
69.63.176.0/20

66.220.144.0/20
66.220.144.0/21
69.63.184.0/21
69.63.176.0/21
74.119.76.0/22
69.171.255.0/24
173.252.64.0/18
69.171.224.0/19
69.171.224.0/20
103.4.96.0/22
69.63.176.0/24
173.252.64.0/19
173.252.70.0/24
31.13.64.0/18
31.13.24.0/21
66.220.152.0/21
66.220.159.0/24
69.171.239.0/24
69.171.240.0/20
31.13.64.0/19
31.13.64.0/24
31.13.65.0/24
31.13.67.0/24
31.13.68.0/24
31.13.69.0/24
31.13.70.0/24
31.13.71.0/24
31.13.72.0/24
31.13.73.0/24
31.13.74.0/24
31.13.75.0/24
31.13.76.0/24
31.13.77.0/24
31.13.96.0/19
31.13.66.0/24
173.252.96.0/19
69.63.178.0/24
31.13.78.0/24
31.13.79.0/24
31.13.80.0/24
31.13.82.0/24
31.13.83.0/24
31.13.84.0/24
31.13.85.0/24
31.13.87.0/24
31.13.88.0/24
31.13.89.0/24
31.13.90.0/24
31.13.91.0/24
31.13.92.0/24
31.13.93.0/24
31.13.94.0/24
31.13.95.0/24
69.171.253.0/24
69.63.186.0/24
204.15.20.0/22
69.63.176.0/20
69.63.176.0/21
69.63.184.0/21
66.220.144.0/20
69.63.176.0/20

Terry
  • 51
  • 1
  • 1