Mullvad VPN · Nginx

Nginx allow/deny config for Mullvad VPN. Drop into your server block or http context. 1,127 CIDRs, refreshed daily.

// nginx_mullvad_allow.conf

DOWNLOAD ↓ ·

# Mullvad IP Ranges
# Updated: 2026-06-13 03:20:06
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# To restrict access to only these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_mullvad_allow.conf;

allow 23.159.216.3/32;
allow 23.159.216.127/32;
allow 23.160.24.3/32;
allow 23.160.24.127/32;
allow 23.162.8.3/32;
allow 23.162.8.67/32;
allow 23.162.8.130/32;
allow 23.162.40.3/32;
allow 23.162.40.127/32;
allow 23.168.216.3/32;
allow 23.168.216.127/32;
allow 23.234.68.2/32;
allow 23.234.68.127/32;
allow 23.234.69.2/32;
allow 23.234.69.127/32;
… (1113 more lines)

// nginx_mullvad_deny.conf

DOWNLOAD ↓ ·

# Mullvad IP Ranges
# Updated: 2026-06-13 03:20:06
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# To deny access from these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_mullvad_deny.conf;

deny 23.159.216.3/32;
deny 23.159.216.127/32;
deny 23.160.24.3/32;
deny 23.160.24.127/32;
deny 23.162.8.3/32;
deny 23.162.8.67/32;
deny 23.162.8.130/32;
deny 23.162.40.3/32;
deny 23.162.40.127/32;
deny 23.168.216.3/32;
deny 23.168.216.127/32;
deny 23.234.68.2/32;
deny 23.234.68.127/32;
deny 23.234.69.2/32;
deny 23.234.69.127/32;
… (1113 more lines)