Review and Allowlist CDN / WAF IP Blocks

Overview

You can use this document to review a list of StackPath IP addresses to allow.

StackPath recommends that you allow these addresses to prevent your internal firewall or on-premise security services from potentially blocking StackPath services, as well as to prevent unexpectedly generated 502 response codes.

Note:

You can also download the list of all blocks in .txt format here.

Allowlist IP blocks 

You can use these instructions to learn how to allow StackPath CDN subnets in your IPTables firewall.

Note:
If you are not comfortable with the Linux and IPTables command line, then contact your web hosting provider or server administrator. A mistake can affect server operation or completely lock you out of the server.

1. Log in to your server as root.
   1. If you are a superuser, append sudo to the commands below.
2. Review the instructions for your operating system.
3. In the commands below, replace SUBNET_HERE with the actual subnet.

Review CDN/WAF IP blocks to allowlist

Review CDN complete iptables list

iptables -I INPUT -s 69.16.133.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.176.0/20 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.8.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.9.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.10.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.11.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.12.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 74.209.134.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.60.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.61.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.68.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.105.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.106.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.112.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 94.46.144.0/20 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.133.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.176.0/20 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.182.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.184.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.16.188.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.8.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.9.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.10.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.11.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 69.197.12.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 74.209.134.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 74.209.134.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.60.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.61.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.68.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.105.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.106.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 81.171.112.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 94.46.144.0/20 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 94.46.153.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 94.46.154.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 94.46.155.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 98.190.70.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 98.190.74.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 98.190.76.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 98.190.78.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 98.190.94.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 103.66.28.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 103.228.104.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 146.88.130.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.0.0/17 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.0.0/19 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.11.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.13.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.14.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.15.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.16.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.18.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.18.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.19.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.21.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.23.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.24.0/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.25.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.29.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.32.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.33.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.34.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.35.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.36.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.37.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.38.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.40.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.41.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.42.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.44.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.45.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.48.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.49.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.52.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.56.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.57.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.58.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.59.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.60.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.64.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.66.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.67.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.68.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.72.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.76.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.77.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.78.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.80.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.81.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.84.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.88.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.90.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.92.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.93.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.94.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.96.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.97.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.98.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.114.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.116.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.118.0/23 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.119.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.139.120.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 173.245.194.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 173.245.208.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 173.245.210.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 173.245.216.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 173.245.218.64/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 184.176.184.128/26 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 184.179.88.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 184.179.90.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 185.69.89.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 185.69.91.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 205.185.216.0/22 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 205.185.217.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 205.185.219.0/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.7.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.8.0/21 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.9.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.10.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.11.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.13.224/27 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.21.0/24 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.24.0/21 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.27.128/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.197.31.0/25 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 209.234.242.0/25 -p tcp -m multiport --dports 80,443 -j ACCEPT

iptables -I INPUT -s 2a0a:e200:1a00:1100::/56 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1a00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1b00:1100::/56 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1c00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1100:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1100:1600::/56 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1100::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1200:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1200::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1300::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1400::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1500::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1600::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1700::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1900:1100::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2a0a:e200:1900:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:0110::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:0210::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:0410::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:0510::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:0610::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:2010::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:2110::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:2210:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:2210::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:2310::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:3010::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:3110::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:4010::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:4110::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:4310::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:5010::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:7001:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:7002:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:4de0:7003:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:50f:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:200:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:300:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:400:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:503:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:505:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:506:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:57a:507:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7001:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7002:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7003:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7004:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7005:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7006:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7007:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2001:1938:7008:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1100::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1200:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1200::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1300::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1400:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1400::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1500::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1600::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1700:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2407:1580:1700::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1c00:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1e00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1100::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1200::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1300:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1300::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1400:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1400::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1500:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1500::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1600::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1700::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1800:1100::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1800::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:1900::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:f800::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:f900::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:fa00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:fb00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2604:6840:fc00::/40 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6100:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6200:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6300:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6400:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6500:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6600:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6700:2::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 2606:ce80:6900:1::/64 -p tcp -m multiport --dports 80,443 -j ACCEPT

Review monitoring service blocks to allowlist

iptables -I INPUT -s 192.166.245.71/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 192.166.245.98/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.201.16.129/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.244.107.67/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 108.61.185.90/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 104.156.232.232/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:5800:8bfc:5400:ff:fe1c:5b87/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:5800:8d34:5400:ff:fe1c:5b8c/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.198.52.85/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.198.12.22/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 37.235.52.70/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 37.235.52.196/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:56:37:235:52:70:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:56:37:235:52:196:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 120.26.119.191/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 47.97.251.164/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.21.35/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.21.87/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a01:348:99:151:236:21:35:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a01:348:99:151:236:21:87:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 149.154.159.21/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.15.26/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:49:149:154:159:21:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:49:151:236:15:26:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.242.213.204/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.242.210.32/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 158.255.208.86/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.20.95/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:852:158:255:208:86:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:852:151:236:20:95:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.24.35/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.24.50/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:354:151:236:24:35:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:354:151:236:24:50:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.249.164.113/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 54.76.234.169/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 149.154.157.239/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.18.167/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:b60:1000:149:154:157:239:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:b60:1000:151:236:18:167:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 104.214.150.207/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 104.214.147.166/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.85.22.40/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.200.117.161/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.45.117/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.52.15/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:7000:9aa1:5400:ff:fe1c:1090/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:7000:9c35:5400:ff:fe1c:4562/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 103.209.192.93/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.252.191.10/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 213.183.56.71/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 213.183.56.187/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:7:213:183:56:71:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a03:f80:7:213:183:56:187:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.186.155.99/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.87.56.240/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 102.133.165.127/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 102.133.168.247/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.23.78/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.23.142/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1d70:ed15:151:236:23:78:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1d70:ed15:151:236:23:142:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 46.246.93.179/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 46.246.126.136/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1a28:1251:46:246:93:179:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1a28:1251:46:246:126:136:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.90.24.209/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.204.22.69/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.14.231/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 151.236.14.238/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1768:1003:151:236:14:231:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1768:1003:151:236:14:238:1/112 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 95.138.170.88/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 95.138.175.4/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1a48:7805:113:be76:4eff:fe08:25fa/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a00:1a48:7805:113:be76:4eff:fe09:1f07/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.183.237/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.179.191/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:7401:834f:5400:ff:fe1c:c96/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:7401:844e:5400:ff:fe1c:c99/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 185.157.232.52/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 185.157.233.153/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a07:4580:b0d:f::6324/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2a07:4580:b0d:82::793a/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 23.253.20.207/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 23.253.22.201/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:4801:7824:101:be76:4eff:fe10:55c6/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:4801:7824:101:be76:4eff:fe10:24dc/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 207.148.1.50/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 149.28.254.195/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.69.31/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.94.5/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:6000:9301:5400:00ff:fe1c:0085/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:6000:95c5:5400:ff:fe1c:88/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 149.28.235.77/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 63.209.33.45/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 52.52.23.91/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 52.53.106.71/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.201.233.220/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 34.203.52.30/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.129.60/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.63.90.144/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 104.238.157.42/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 45.32.225.132/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:8000:8652:5400:ff:fe1c:45c2/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables6 -I INPUT -s 2001:19f0:8000:8706:5400:ff:fe1c:45c4/64 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.245.111.92/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 35.245.0.188/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 78.142.19.197/32 -p tcp -m multiport --dports 80,443 -j ACCEPT
iptables -I INPUT -s 84.54.49.15/32 -p tcp -m multiport --dports 80,443 -j ACCEPT