Stripe publishes 177 IP ranges.
Short answer
Stripe publishes the addresses its API is served from and the addresses its webhooks are sent from, as two plain-text lists.
What it’s for
Use the webhooks list to accept Stripe event deliveries only from Stripe; use the API list for outbound firewall rules.
Sub-lists
Sub-lists with a written explanation are described on their own page.
Prefixes
What changed
No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.
Allowlist formats
nginx (first 5 prefixes)
allow 107.23.48.182/32; allow 107.23.48.232/32; allow 13.112.224.240/32; allow 13.115.13.148/32; allow 13.210.129.177/32; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 107.23.48.182/32 -j ACCEPT iptables -A INPUT -s 107.23.48.232/32 -j ACCEPT iptables -A INPUT -s 13.112.224.240/32 -j ACCEPT iptables -A INPUT -s 13.115.13.148/32 -j ACCEPT iptables -A INPUT -s 13.210.129.177/32 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Stripe: published IP ranges · checked 5 Nov 2026
- Stripe documentation