ChatGPT-User IP ranges

ChatGPT-User at a glance

The ranges

Every prefix in OpenAI's file as of 2026-09-12, IPv4 first, each family in address order. An address inside any of them is ChatGPT-User as far as its operator is concerned.

4.151.71.176/28
4.151.119.48/28
4.189.118.208/28
4.189.119.48/28
4.197.22.112/28
4.197.64.0/28
4.197.64.16/28
4.197.64.48/28
4.197.64.64/28
4.197.115.112/28
4.201.232.64/28
4.205.128.176/28
4.218.24.64/28
4.226.200.16/28
4.226.226.32/28
9.129.0.0/17
9.160.34.144/28
9.160.36.16/28
9.160.96.16/28
9.160.128.16/28
9.160.128.64/28
9.160.163.128/28
9.163.101.48/28
9.205.8.48/28
9.205.8.64/28
9.205.25.128/28
9.205.30.128/28
9.205.30.144/28
9.205.30.176/28
9.205.128.32/28
9.205.128.48/28
9.223.181.208/28
9.234.96.192/28
9.234.97.96/28
13.65.138.112/28
13.67.72.16/28
13.71.2.208/28
13.76.32.208/28
13.76.116.80/28
13.83.167.128/28
13.83.237.176/28
20.45.178.144/28
20.55.229.144/28
20.57.199.192/28
20.63.180.96/28
20.63.221.64/28
20.78.130.48/28
20.83.243.176/28
20.98.18.80/28
20.102.212.144/28
20.113.211.112/28
20.113.225.112/28
20.125.112.224/28
20.125.144.144/28
20.161.75.208/28
20.168.7.192/28
20.169.73.32/28
20.169.73.64/28
20.169.78.48/28
20.169.78.64/28
20.169.78.128/28
20.169.78.160/28
20.169.78.192/28
20.169.86.224/28
20.169.86.240/28
20.170.184.16/28
20.170.184.32/28
20.170.184.48/28
20.170.184.64/28
20.170.184.80/28
20.172.29.32/28
20.199.211.160/28
20.199.242.0/28
20.200.212.240/28
20.206.101.192/28
20.210.211.192/28
20.215.187.208/28
20.215.219.128/28
20.215.219.160/28
20.215.219.208/28
20.218.30.240/28
20.219.71.192/28
20.219.184.96/28
20.222.36.192/28
20.227.140.32/28
20.228.106.176/28
20.235.87.224/28
20.249.63.208/28
20.250.6.128/28
20.250.136.64/28
23.98.142.176/28
23.98.186.64/28
23.98.186.96/28
23.98.186.176/28
23.98.186.192/28
23.101.217.176/28
23.102.140.144/28
23.102.141.32/28
40.74.200.208/28
40.81.67.96/28
40.81.234.144/28
40.84.221.208/28
40.84.221.224/28
40.116.73.208/28
48.221.40.176/28
48.221.184.80/28
48.221.184.96/28
51.8.155.48/28
51.8.155.112/28
51.57.0.96/28
51.59.24.64/28
51.59.24.80/28
51.59.48.80/28
51.116.2.80/28
51.116.221.96/28
52.148.129.32/28
52.156.77.144/28
52.159.227.32/28
52.159.249.96/28
52.161.49.96/28
52.165.212.48/28
52.172.129.160/28
52.173.219.96/28
52.173.219.112/28
52.173.221.16/28
52.173.221.176/28
52.173.221.208/28
52.173.234.16/28
52.173.234.80/28
52.183.217.240/28
52.190.137.16/28
52.190.137.144/28
52.190.139.48/28
52.190.142.64/28
52.190.190.16/28
52.225.75.208/28
52.231.30.48/28
52.231.34.176/28
52.231.39.144/28
52.231.50.64/28
52.236.94.144/28
52.241.146.208/28
52.242.132.224/28
52.242.132.240/28
52.255.109.80/28
52.255.109.96/28
52.255.109.144/28
52.255.111.0/28
52.255.111.80/28
57.154.174.112/28
57.154.175.0/28
57.154.187.32/28
68.154.28.96/28
68.220.57.64/28
70.153.32.16/28
70.153.32.32/28
70.153.87.224/28
70.153.189.192/28
70.156.152.96/28
74.7.35.48/28
74.7.35.112/28
74.7.36.64/28
74.7.36.80/28
74.7.36.96/28
74.161.200.96/28
74.224.217.64/28
74.226.253.160/28
74.248.37.160/28
85.211.128.16/28
85.211.128.32/28
104.208.184.192/28
104.210.139.192/28
104.210.139.224/28
128.85.198.32/28
132.196.82.48/28
134.149.233.80/28
135.13.64.240/28
135.116.136.160/28
135.220.73.208/28
135.220.73.240/28
135.237.131.208/28
135.237.133.48/28
137.135.191.176/28
138.91.46.96/28
145.132.136.96/28
158.158.5.32/28
168.63.252.240/28
172.162.248.64/28
172.170.1.80/28
172.170.225.0/28
172.170.241.80/28
172.175.152.224/28
172.178.140.144/28
172.178.141.112/28
172.178.141.128/28
172.183.143.224/28
172.183.222.128/28
172.192.112.208/28
172.197.160.192/28
172.197.203.16/28
172.199.137.80/28
172.204.28.224/28
172.204.96.80/28
172.205.189.192/28
172.207.1.32/28
172.212.172.160/28
172.215.215.32/28
191.232.238.96/28
191.233.197.0/28
191.233.199.160/28
191.234.167.144/28
191.235.99.160/28
191.237.249.64/28

—

How to verify a visitor is ChatGPT-User

Take the request's source address and check it against the prefixes above; the User-Agent header is a claim anyone can type and proves nothing on its own. OpenAI documents the ranges as the way to verify ChatGPT-User; a reverse DNS name is not part of its guidance, so do not rely on one.

What the API answers for one of its addresses

A lookup of an address inside these ranges answers is_crawler true, names it in crawler and classes it in crawler_kind. A crawler carries no risk weight, and the datacenter weight is skipped for it: its operator is known and its infrastructure is the point.

curl https://spaw.co/api/v1/ip \
  -H "Authorization: Bearer $SPAW_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "4.151.71.176"}'

"is_crawler": true,
"crawler": "ChatGPT-User",
"crawler_kind": "ai_assistant",
"risk_signals": [{ "signal": "datacenter", "weight": 0, "dataset": "datacenter-ranges" }]

A range proves the operator, not intent. Whether ChatGPT-User is welcome on a site is a robots.txt decision; this page and the lookup only settle whether a request that says it is ChatGPT-User really came from OpenAI.

Other crawlers

• Googlebot
• Google special crawlers
• Google user-triggered fetchers
• Google user-triggered fetchers
• Bingbot
• GPTBot
• OAI-SearchBot
• PerplexityBot
• Perplexity-User
• DuckDuckBot
• AhrefsBot
• Applebot
• YandexBot
• Baiduspider
• Every crawler
• Look up any address

crawler-ranges 2026-09-12 · checked 2026-09-13