Bogon IP Address Ranges
Bogon IPs are those reserved for special use, e.g. private networking, loopbacks, documentation and testing. They shouldn't appear on the public internet. Ranges that haven't been allocated yet are bogons too.
A bogon address does not belong to a host or network out on the public internet, so there is nothing inside these ranges for our anonymity databases to observe.
IPv4 bogon ranges
Reserved by the IETF or IANA, and never routed on the public internet.
| NETBLOCK | DESCRIPTION | REFERENCE |
|---|---|---|
| 0.0.0.0/8 | "This" network | RFC 1122 |
| 10.0.0.0/8 | Private-use networks | RFC 1918 |
| 100.64.0.0/10 | Carrier-grade NAT | RFC 6598 |
| 127.0.0.0/8 | Loopback | RFC 1122 |
| 169.254.0.0/16 | Link local | RFC 3927 |
| 172.16.0.0/12 | Private-use networks | RFC 1918 |
| 192.0.0.0/24 | IETF protocol assignments | RFC 6890 |
| 192.0.2.0/24 | TEST-NET-1 | RFC 5737 |
| 192.88.99.2/32 | 6a44 relay anycast address | RFC 6751 |
| 192.168.0.0/16 | Private-use networks | RFC 1918 |
| 198.18.0.0/15 | Network interconnect device benchmark testing | RFC 2544 |
| 198.51.100.0/24 | TEST-NET-2 | RFC 5737 |
| 203.0.113.0/24 | TEST-NET-3 | RFC 5737 |
| 224.0.0.0/4 | Multicast | RFC 5771 |
| 255.255.255.255/32 | Limited broadcast | RFC 8190 |
| 240.0.0.0/4 | Reserved for future use | RFC 1112 |
IPv6 bogon ranges
The equivalent reservations in IPv6 address space.
| NETBLOCK | DESCRIPTION | REFERENCE |
|---|---|---|
| ::/128 | Node-scope unicast unspecified address | RFC 4291 |
| ::1/128 | Node-scope unicast loopback address | RFC 4291 |
| ::ffff:0:0/96 | IPv4-mapped addresses | RFC 4291 |
| ::/96 | IPv4-compatible addresses | RFC 4291 |
| 64:ff9b::/96 | IPv4/IPv6 translation, the NAT64 well-known prefix | RFC 6052 |
| 64:ff9b:1::/48 | Local-use IPv4/IPv6 translation | RFC 8215 |
| 100::/64 | Remotely triggered black hole addresses | RFC 6666 |
| 100:0:0:1::/64 | Dummy IPv6 prefix | RFC 9780 |
| 2001:2::/48 | Benchmarking | RFC 5180 |
| 2001:10::/28 | Overlay routable cryptographic hash identifiers (ORCHID) | RFC 4843 |
| 2001:db8::/32 | Documentation prefix | RFC 3849 |
| 3fff::/20 | Documentation prefix | RFC 9637 |
| 5f00::/16 | Segment Routing over IPv6 (SRv6) SIDs | RFC 9602 |
| fc00::/7 | Unique local addresses (ULA) | RFC 4193 |
| fe80::/10 | Link-local unicast | RFC 4291 |
| fec0::/10 | Site-local unicast (deprecated) | RFC 3879 |
| ff00::/8 | Multicast; ff0e::/16 is global scope and may appear on the public internet | RFC 4291 |
| 2001:1::/32 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:2::/31 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:4::/30 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:8::/29 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:20::/27 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:40::/26 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:80::/25 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| 2001:100::/24 | IETF protocol assignments (2001::/23, outside Teredo) | RFC 2928 |
| ::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| 4000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| 6000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| 8000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| a000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| c000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
| e000::/3 | Unallocated: outside global unicast (2000::/3) | RFC 4291 |
IPv6 additional bogon ranges
These aren't official IPv6 bogon ranges: they're the 6to4 (RFC 3056) and Teredo (RFC 4380) forms of the IPv4 ranges above, treated as bogons for the same reason.
| NETBLOCK | DESCRIPTION | IPV4 SOURCE |
|---|---|---|
| 2002::/24 | 6to4 bogon | 0.0.0.0/8 |
| 2002:a00::/24 | 6to4 bogon | 10.0.0.0/8 |
| 2002:6440::/26 | 6to4 bogon | 100.64.0.0/10 |
| 2002:7f00::/24 | 6to4 bogon | 127.0.0.0/8 |
| 2002:a9fe::/32 | 6to4 bogon | 169.254.0.0/16 |
| 2002:ac10::/28 | 6to4 bogon | 172.16.0.0/12 |
| 2002:c000::/40 | 6to4 bogon | 192.0.0.0/24 |
| 2002:c000:200::/40 | 6to4 bogon | 192.0.2.0/24 |
| 2002:c058:6302::/48 | 6to4 bogon | 192.88.99.2/32 |
| 2002:c0a8::/32 | 6to4 bogon | 192.168.0.0/16 |
| 2002:c612::/31 | 6to4 bogon | 198.18.0.0/15 |
| 2002:c633:6400::/40 | 6to4 bogon | 198.51.100.0/24 |
| 2002:cb00:7100::/40 | 6to4 bogon | 203.0.113.0/24 |
| 2002:e000::/20 | 6to4 bogon | 224.0.0.0/4 |
| 2002:f000::/20 | 6to4 bogon | 240.0.0.0/4 |
| 2002:ffff:ffff::/48 | 6to4 bogon | 255.255.255.255/32 |
| 2001::/40 | Teredo bogon | 0.0.0.0/8 |
| 2001:0:a00::/40 | Teredo bogon | 10.0.0.0/8 |
| 2001:0:6440::/42 | Teredo bogon | 100.64.0.0/10 |
| 2001:0:7f00::/40 | Teredo bogon | 127.0.0.0/8 |
| 2001:0:a9fe::/48 | Teredo bogon | 169.254.0.0/16 |
| 2001:0:ac10::/44 | Teredo bogon | 172.16.0.0/12 |
| 2001:0:c000::/56 | Teredo bogon | 192.0.0.0/24 |
| 2001:0:c000:200::/56 | Teredo bogon | 192.0.2.0/24 |
| 2001:0:c058:6302::/64 | Teredo bogon | 192.88.99.2/32 |
| 2001:0:c0a8::/48 | Teredo bogon | 192.168.0.0/16 |
| 2001:0:c612::/47 | Teredo bogon | 198.18.0.0/15 |
| 2001:0:c633:6400::/56 | Teredo bogon | 198.51.100.0/24 |
| 2001:0:cb00:7100::/56 | Teredo bogon | 203.0.113.0/24 |
| 2001:0:e000::/36 | Teredo bogon | 224.0.0.0/4 |
| 2001:0:f000::/36 | Teredo bogon | 240.0.0.0/4 |
| 2001:0:ffff:ffff::/64 | Teredo bogon | 255.255.255.255/32 |
Should I filter bogons?
At your network's edge, yes: a packet arriving from the internet with a bogon source address is misconfigured or spoofed, and dropping it is standard practice, as is refusing a BGP announcement of bogon space. Inside your own network private ranges are ordinary traffic, so filter at the border.
Is 100.64.0.0/10 a bogon?
Yes. It's shared address space for carrier-grade NAT (RFC 6598): a carrier numbers its customers from it behind its own NAT, so it shows up inside a mobile or broadband network but never as a source on the public internet.
Does the list include unallocated space?
Where the reservation is lasting: 240.0.0.0/4, reserved for future use, and the IPv6 blocks outside 2000::/3, which aren't allocated for global unicast. Space the registries hold but haven't assigned yet changes as they assign it, and isn't in the list.
Where does the list come from?
From IANA's special-purpose address registries and the RFCs that reserve each range, as the table cites them. It's published as mslmio/bogon-ip on GitHub, and the Bogon IP database, free with an account, is built from it.
Are there bogon AS numbers too?
Yes: AS numbers reserved for private use, documentation or a special role, or not yet allocated, which should never appear in a BGP announcement, 64512 to 65534 among them. Bogon ASN lists every such range from IANA's registry, free with an account.
Test the real build first.
An evaluation license puts a full current build in your hands, with no sampling, so you can measure it against your own traffic before anyone talks about terms.