Current Bogon Address List

Complete reference of invalid IP ranges that should not appear on the public internet

Last Updated: September 2025

Based on current IANA Special-Purpose Address Registry and RFC specifications

What Are Bogon Addresses?

Bogon addresses are IP ranges that should not appear in internet routing tables. This includes:

  • Private networks (RFC 1918) - for internal use only
  • Reserved ranges - protocol-specific or experimental use
  • Unallocated space - not yet assigned by IANA/RIRs

Read Complete Bogon Security Guide

Complete Bogon Address Ranges
CIDR Range Address Range Description RFC/Source Status
0.0.0.0/8 0.0.0.0 - 0.255.255.255 "This Network" RFC 1122 Current
10.0.0.0/8 10.0.0.0 - 10.255.255.255 Private Network (Class A) RFC 1918 Current
100.64.0.0/10 100.64.0.0 - 100.127.255.255 Carrier-Grade NAT RFC 6598 Current
127.0.0.0/8 127.0.0.0 - 127.255.255.255 Loopback Addresses RFC 1122 Current
169.254.0.0/16 169.254.0.0 - 169.254.255.255 Link-Local (APIPA) RFC 3927 Current
172.16.0.0/12 172.16.0.0 - 172.31.255.255 Private Network (Class B) RFC 1918 Current
192.0.0.0/24 192.0.0.0 - 192.0.0.255 IETF Protocol Assignments RFC 6890 Current
192.0.2.0/24 192.0.2.0 - 192.0.2.255 Documentation/Example (TEST-NET-1) RFC 5737 Current
192.168.0.0/16 192.168.0.0 - 192.168.255.255 Private Network (Class C) RFC 1918 Current
198.18.0.0/15 198.18.0.0 - 198.19.255.255 Benchmarking/Testing RFC 2544 Current
198.51.100.0/24 198.51.100.0 - 198.51.100.255 Documentation/Example (TEST-NET-2) RFC 5737 Current
203.0.113.0/24 203.0.113.0 - 203.0.113.255 Documentation/Example (TEST-NET-3) RFC 5737 Current
224.0.0.0/4 224.0.0.0 - 239.255.255.255 Multicast Addresses RFC 3171 Current
240.0.0.0/4 240.0.0.0 - 255.255.255.255 Reserved/Experimental (Class E) RFC 1112 Current
Usage Guidelines
  • Block at network perimeter
  • Apply ingress and egress filtering
  • Monitor logs for bogon traffic
  • Update filters annually
  • Allow legitimate private traffic
Security Alerts

If you see bogon traffic:

  • Check for source address spoofing
  • Investigate potential attacks
  • Review NAT configurations
  • Validate BGP route advertisements