GitHub uses 25 prefixes for shared_ingress.
Short answer
GitHub lists these prefixes under “shared_ingress”. GitHub’s meta API lists the addresses for each GitHub service: webhooks (hooks), the website (web), the API, Git, Actions runners, Pages, packages, Copilot and others.
Prefixes
What changed
- 31 Oct 2026
+ 138.91.182.224/32 + 20.85.130.105/32 + 52.140.63.241/32 + 52.175.140.176/32
- 23 Oct 2026
+ 172.182.252.128/32 + 20.199.39.224/32 + 20.200.245.249/32 + 20.201.28.153/32 + 20.205.243.169/32 + 20.207.73.89/32 + 20.217.135.9/32 + 20.233.83.153/32 + 20.250.119.64/32 + 20.26.156.217/32 + 20.27.177.121/32 + 20.29.134.26/32 + 20.87.245.9/32 + 4.172.7.153/32 + 4.208.26.201/32 + 4.225.11.192/32 + 4.228.31.153/32 + 4.237.22.41/32 + 4.249.131.160/32 + 48.202.248.32/32 + 48.204.201.0/32
Allowlist formats
nginx (first 5 prefixes)
allow 138.91.182.224/32; allow 172.182.252.128/32; allow 20.199.39.224/32; allow 20.200.245.249/32; allow 20.201.28.153/32; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 138.91.182.224/32 -j ACCEPT iptables -A INPUT -s 172.182.252.128/32 -j ACCEPT iptables -A INPUT -s 20.199.39.224/32 -j ACCEPT iptables -A INPUT -s 20.200.245.249/32 -j ACCEPT iptables -A INPUT -s 20.201.28.153/32 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- GitHub: published IP ranges · checked 3 Nov 2026
- GitHub documentation