GitHub uses 9 prefixes for hooks.
Short answer
hooks are the addresses GitHub sends webhook deliveries from. Allow them to receive webhooks on a private network.
Prefixes
What changed
- 8 Oct 2026
+ 9.234.106.48/28 + 9.234.98.160/28 + 9.234.98.176/28
Allowlist formats
nginx (first 5 prefixes)
allow 140.82.112.0/20; allow 143.55.64.0/20; allow 185.199.108.0/22; allow 192.30.252.0/22; allow 9.234.106.48/28; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 140.82.112.0/20 -j ACCEPT iptables -A INPUT -s 143.55.64.0/20 -j ACCEPT iptables -A INPUT -s 185.199.108.0/22 -j ACCEPT iptables -A INPUT -s 192.30.252.0/22 -j ACCEPT iptables -A INPUT -s 9.234.106.48/28 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- GitHub: published IP ranges · checked 5 Nov 2026
- GitHub documentation