DigitalOcean · Nginx

Nginx allow/deny config for DigitalOcean. Drop into your server block or http context. 1,226 CIDRs, refreshed daily.

// nginx_digitalocean_allow.conf

DOWNLOAD ↓ ·

# Digitalocean IP Ranges
# Updated: 2026-06-30 03:20:01
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# To restrict access to only these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_digitalocean_allow.conf;

allow 5.101.96.0/21;
allow 5.101.104.0/22;
allow 24.144.64.0/21;
allow 24.144.74.0/23;
allow 24.144.76.0/22;
allow 24.144.80.0/20;
allow 24.144.96.0/19;
allow 24.199.64.0/18;
allow 37.139.0.0/19;
allow 45.55.0.0/16;
allow 46.101.0.0/16;
allow 64.23.128.0/17;
allow 64.225.0.0/17;
allow 64.226.64.0/18;
allow 64.227.0.0/17;
… (218 more lines)

// nginx_digitalocean_deny.conf

DOWNLOAD ↓ ·

# Digitalocean IP Ranges
# Updated: 2026-06-30 03:20:01
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# To deny access from these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_digitalocean_deny.conf;

deny 5.101.96.0/21;
deny 5.101.104.0/22;
deny 24.144.64.0/21;
deny 24.144.74.0/23;
deny 24.144.76.0/22;
deny 24.144.80.0/20;
deny 24.144.96.0/19;
deny 24.199.64.0/18;
deny 37.139.0.0/19;
deny 45.55.0.0/16;
deny 46.101.0.0/16;
deny 64.23.128.0/17;
deny 64.225.0.0/17;
deny 64.226.64.0/18;
deny 64.227.0.0/17;
… (218 more lines)