Automattic IP Ranges
Automattic is the company behind WordPress.com, Jetpack, Gravatar and Tumblr. Its network, AS2635, is registered with ARIN to Automattic, Inc. and carries both the sites it hosts and the services those sites call home to.
- Provider
- Automattic
- Primary ASN
- AS2635
- Category
- Hosting
- Headquarters
- San Francisco, CA, USA
- Announced IPv4 prefixes
- 155
- Registry
- ARIN
Known IP ranges
These prefixes are currently announced to the global routing table by AS2635 (AUTOMATTIC - Automattic, Inc). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
192.0.96.0/20
192.0.80.0/20
192.0.112.0/21
195.234.108.0/22
192.0.74.0/23
87.250.180.0/23
87.250.182.0/23
87.250.176.0/23
198.181.116.0/23
87.250.178.0/23
2a04:fa80:4::/48
2a04:fa80:2::/48
2620:115:c00f::/48 (IPv6)
What does an Automattic IP mean in a privacy test?
An Automattic address is one of its own machines - a WordPress.com site being served, or Jetpack reaching a site you run. It is a hosting network rather than a consumer line, so an address here is a server rather than somebody's home connection, but it is Automattic's own fleet rather than space a stranger can rent by the hour.
Where Automattic publishes the Jetpack allowlist
The published list is aimed at one job - letting Jetpack reach a self-hosted WordPress site through a firewall - and it lives at jetpack.com/ips-v4.txt as plain text, with the same content as JSON at jetpack.com/ips-v4.json. Automattic's support page describes them as machine-readable versions in JSON and plain text format, meant for automating firewall changes, and warns that the addresses are subject to change and that IP-based rules have to be updated when they do.
Eight entries, and they repay reading rather than pasting. Five are Automattic's own blocks - 192.0.64.0/18 with 192.0.80.0/20, 192.0.96.0/20 and 192.0.112.0/20 inside it, plus 195.234.108.0/22. The other three are single hosts: 122.248.245.244/32, 54.217.201.243/32 and 54.232.116.4/32. Those three are not on Automattic's network at all - all three are announced by AS16509, Amazon. There is no IPv6 companion to the file.
Telling a hosted site apart from Jetpack calling your server
Traffic direction is what separates the two things this network does. An address in 192.0.64.0/18 that your browser connected out to is a site Automattic hosts - somebody else's blog on WordPress.com, or a Gravatar image. The same block arriving at a server you run is Jetpack or WordPress.com calling in: a stats ping, a backup fetch, or a check against the site you connected to Jetpack.
Neither is a rented machine. Automattic hosts on its own fleet rather than selling raw compute, so unlike a VPS range there is no arbitrary third-party software on these addresses, which is why the published allowlist is short enough to read in one go. The three Amazon hosts in that list are the exception that proves the point: an allowlist built by matching AS2635 alone would silently drop them, and Jetpack would fail to reach the site.
Related tools
Frequently asked questions
What IP ranges does Automattic use?
Automattic announces its space under AS2635, registered with ARIN to Automattic, Inc.; the largest blocks sit inside 192.0.64.0/18, with 195.234.108.0/22 and 87.250.176.0/23 alongside them. For firewall work the list to use is the shorter published one at jetpack.com/ips-v4.txt, which covers what Jetpack and WordPress.com connect from.
Why does an Automattic IP appear in my privacy test?
An Automattic address is one of its own machines - a WordPress.com site being served, or Jetpack reaching a site you run. It is a hosting network rather than a consumer line, so an address here is a server rather than somebody's home connection, but it is Automattic's own fleet rather than space a stranger can rent by the hour.
Which IP addresses do I allow for Jetpack?
Automattic publishes the set at jetpack.com/ips-v4.txt, and the same content as JSON at jetpack.com/ips-v4.json, for exactly this. It is eight entries: five Automattic blocks under 192.0.64.0/18 and 195.234.108.0/22, and three single hosts. Automattic warns that the addresses change and that IP-based rules need updating when they do.
Why are Amazon addresses in the Jetpack IP list?
Three of the eight published entries - 122.248.245.244/32, 54.217.201.243/32 and 54.232.116.4/32 - are announced by AS16509, Amazon, rather than by Automattic. An allowlist built from Automattic's ASN instead of from the published file would leave those out.
Does Automattic publish IPv6 ranges for Jetpack?
Not in that file. The published list is IPv4 only, in both its text and its JSON form. AS2635 does announce IPv6 space, so a lookup can return an Automattic IPv6 address even though the allowlist file never mentions one.