Undocumented external IP ranges

We have some cloud-function that communicates with auth0 directly. Some of these requests are blocked though due to the IP addresses being unknown. To mitigate this we want to add these ranges into an allow-list on auth0, but we seem to be unable to find the correct IP range list.

The blocked calls came from different IPs with the pattern 107.178.238.xxx.

I checked this list here but wasn’t able to locate said IPs in there

This is the list of Google external IP ranges that I found:

https://www.gstatic.com/ipranges/goog.json

See also:

https://cloud.google.com/appengine/docs/legacy/standard/python/outbound-ip-addresses#outbound-ip-addresses

Thanks @kolban , unfortunately this is the same list i found and it does not contain the IP-address we got the calls from

Howdy my friend … can we check again … I see the lists as different. Your link was to:

https://www.gstatic.com/ipranges/cloud.json

while my link was to

https://www.gstatic.com/ipranges/goog.json

basically “cloud.json” vs “goog.json”. I am seeing “goog.json” as listing the IP addresses from the calls. Apologies in advance if I am mistaken … but let’s take a look-see.

1 Like