Google (all services) publishes 148 IP ranges.
Short answer
goog.json lists the address ranges Google uses for its own services and APIs (the ranges Google Workspace administrators allowlist), separate from the customer ranges in Google Cloud’s cloud.json.
What it’s for
Use it to allow Google services through a firewall. Subtracting cloud.json from it gives the addresses used only by Google itself.
Prefixes
What changed
- 24 Oct 2026
+ 136.22.16.0/20 + 136.22.8.0/21 + 136.23.0.0/17 + 172.102.8.0/21 + 185.150.148.0/22 + 209.107.176.0/20 + 2a03:ace0::/32 − 136.22.8.0/22 − 136.23.39.0/24 − 136.23.48.0/20 − 136.23.64.0/18
Allowlist formats
nginx (first 5 prefixes)
allow 104.154.0.0/15; allow 104.196.0.0/14; allow 104.237.160.0/19; allow 107.167.160.0/19; allow 107.178.192.0/18; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 104.154.0.0/15 -j ACCEPT iptables -A INPUT -s 104.196.0.0/14 -j ACCEPT iptables -A INPUT -s 104.237.160.0/19 -j ACCEPT iptables -A INPUT -s 107.167.160.0/19 -j ACCEPT iptables -A INPUT -s 107.178.192.0/18 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Google (all services): published IP ranges · checked 6 Nov 2026
- Google (all services) documentation