To allow Googlebot to crawl your site via firewall, you must whitelist the official IP address ranges Google uses. Google updates these periodically, with the latest major update on February 4, 2025.

Complete and current Googlebot IP ranges include:

  • New IPv4 ranges added in 2025:

    • 192.178.6.0/27

    • 192.178.6.32/27

  • Retained IPv4 ranges:

    • 192.178.5.0/27

    • 66.249.74.128/27

    • 34.100.182.96/28 (India, Mumbai)

    • 34.101.50.144/28 (Indonesia, Jakarta)

    • 34.118.254.0/28 (Belgium, Brussels)

    • 34.118.66.0/28 (Poland, Warsaw)

    • 34.126.178.96/28 (Singapore)

    • 34.146.150.144/28 (Japan, Tokyo)

    • 34.147.110.144/28 (Netherlands, Groningen)

    • 34.151.74.144/28 (Australia, Sydney)

    • 34.152.50.64/28 (Canada, Montreal)

    • 34.154.114.144/28 (Italy, Milan)

    • 34.155.98.32/28 (France, Paris)

  • Removed IPv4 ranges in 2025:

    • 66.249.64.192/27

    • 66.249.66.128/27

  • Recent additions include IPv6 prefixes like:

    • 2001:4860:4801:93::/64

Important notes:

  • Google publishes the official and most accurate IP lists in JSON files, which you should use to keep firewalls up-to-date:

    • Googlebot IP ranges:
      https://developers.google.com/static/search/apis/ipranges/goog.json

    • Additional crawler lists:

      • user-triggered-fetchers-google.json (Google-controlled user-triggered crawlers)

      • user-triggered-fetchers.json (Google Cloud user-triggered fetchers not fully controlled by Google)

  • Use reverse DNS verification (IP resolves to googlebot.com, googleusercontent.com, or google.com) plus forward DNS to verify the authenticity of Googlebot traffic.

  • Googlebot now also uses local IP ranges outside the USA; consider allowing those if you block US IPs.

  • Always whitelist CIDR ranges as Googlebot uses multiple IPs, not just single addresses.

Summary for firewall rules:

Whitelist the IP ranges from the official Google JSON list (goog.json) plus the new IPv4/IPv6 ranges added in 2025 listed above. Regularly update your firewall rules based on the official data to avoid blocking genuine Googlebot crawlers and harming SEO.