Starlink IP Ranges
Starlink is the satellite internet service operated by SpaceX. The addresses its terminals appear from are announced under AS14593, registered with ARIN to Space Exploration Technologies Corporation in September 2018.
- Provider
- Starlink
- Primary ASN
- AS14593
- Category
- ISP
- Headquarters
- Hawthorne, CA, USA
- Announced IPv4 prefixes
- 1957
- Registry
- ARIN
Known IP ranges
These prefixes are currently announced to the global routing table by AS14593 (SPACEX-STARLINK - Space Exploration Technologies Corporation). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
206.214.224.0/20
206.224.64.0/20
129.222.48.0/21
129.224.192.0/21
129.222.232.0/21
98.97.8.0/21
98.97.120.0/21
129.222.24.0/21
145.224.72.0/21
129.222.248.0/21
2605:59c7:9000::/36
2803:9810:1800::/38
2a0d:3344:4c00::/38 (IPv6)
What does a Starlink IP mean in a privacy test?
A Starlink address as your visible IP means the connection reached the site over the satellite link with nothing tunnelling it. It says less about where you are than an ordinary ISP address does: Starlink gives most terminals a carrier-grade NAT address, so the public IP a site records belongs to a ground station's pool and is shared with every other terminal using that pool at the time.
Where Starlink publishes its address list
Starlink does not publish a firewall allowlist, but it does publish something more useful for the question people usually arrive with: a self-published geolocation feed in the RFC 8805 format, served as plain CSV at geoip.starlinkisp.net/feed.csv. Each line is one prefix followed by an ISO 3166-1 country code, an ISO 3166-2 region code and a city, so a row reads 9.161.128.0/24,US,US-TX,Dallas. The file runs to thousands of rows, most of them /24s, because the service splits its space finely enough to place each block at the ground station serving it.
That is the file to read when a lookup puts a Starlink address in a city the subscriber has never visited. It is the operator's own statement of where a block is used, and the commercial geolocation databases ingest it, so an address moves on the map when Starlink re-points it rather than when anybody moves house. What the feed does not carry is organisation names, ASNs or allocation dates - for those the ARIN registry record is still the authoritative source, and it is where the blocks above come from.
Telling a Starlink subscriber apart from a hosted machine
Almost everything on AS14593 is a subscriber connection rather than a rented machine, which makes this network the opposite case to a cloud provider's. Starlink's own support documentation describes the default IPv4 configuration as carrier-grade NAT: terminals are addressed out of 100.64.0.0/10 by DHCP and translated to a shared public Starlink address on the way out, and that default policy accepts no inbound traffic at all. A routable public IPv4 address is an optional setting on the Priority tiers rather than the norm.
Two things follow for anyone reading logs. A Starlink address seen twice is weak evidence that it was the same household, because the NAT pool is shared and reassigned. And an inbound connection from AS14593 is unusual by construction, since the default configuration cannot accept one - a server answering on Starlink space is a subscriber who asked for a public address, not Starlink hosting anything for anyone.
Related tools
Frequently asked questions
What IP ranges does Starlink use?
Starlink announces its addresses under AS14593, registered with ARIN to Space Exploration Technologies Corporation. The blocks listed above are the largest currently in the routing table. The full per-block picture, with a country, region and city for each prefix, is in the geofeed Starlink publishes at geoip.starlinkisp.net/feed.csv.
Why does a Starlink IP appear in my privacy test?
A Starlink address as your visible IP means the connection reached the site over the satellite link with nothing tunnelling it. It says less about where you are than an ordinary ISP address does: Starlink gives most terminals a carrier-grade NAT address, so the public IP a site records belongs to a ground station's pool and is shared with every other terminal using that pool at the time.
Does Starlink give you a public IP address?
Not by default. Starlink's support documentation describes the standard IPv4 configuration as carrier-grade NAT, with terminals addressed out of 100.64.0.0/10 by DHCP and translated to a shared public address on the way out, and states that this default policy allows no inbound traffic. A routable public IPv4 address is an optional setting on the Priority service tiers.
Why does my Starlink IP geolocate to another city?
Because the address belongs to the ground station carrying the session rather than to the dish. Starlink publishes an RFC 8805 geofeed stating a country, region and city for each prefix, and geolocation databases follow it, so an address is placed where Starlink says that block is used.
Can a VPN exit run on a Starlink address?
It would be unusual. AS14593 space is handed to subscriber terminals rather than rented out as compute, and the default carrier-grade NAT policy accepts no inbound connections, so there is nothing for a client to connect to unless a subscriber has taken a public address and set one up themselves.