Verizon Wireless IP Ranges
Verizon Wireless is the mobile arm of Verizon, and its network is registered separately from the wireline business: ARIN holds AS6167 under the AS name CELLCO-PART, the partnership that trades as Verizon Wireless, since September 2001.
- Provider
- Verizon Wireless
- Primary ASN
- AS6167
- Category
- ISP
- Headquarters
- Basking Ridge, NJ, USA
- Announced IPv4 prefixes
- 2171
- Registry
- ARIN
Known IP ranges
These prefixes are currently announced to the global routing table by AS6167 (CELLCO-PART - Verizon Business). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
97.160.0.0/15
97.195.0.0/16
97.232.0.0/16
75.207.0.0/16
75.220.0.0/16
97.214.0.0/16
97.191.0.0/16
97.208.0.0/16
75.208.0.0/16
166.249.0.0/16
2600:1006:a110::/44
2600:1008:b320::/44
2600:100e:9100::/44 (IPv6)
What does a Verizon Wireless IP mean in a privacy test?
A Verizon Wireless address as your visible IP means traffic left over the cellular network with no tunnel carrying it. It is not the same network as the Verizon broadband and business space on AS701, and it says less about where you are than a fixed line would: mobile addresses come from pools attached to the gateway serving the session rather than to a street address.
Where to get Verizon Wireless's address list, and which Verizon you are looking at
Verizon publishes no firewall allowlist for its subscriber networks, so the registry is the source - and the registry is where the confusion starts. ARIN records AS6167 under the AS name CELLCO-PART, for Cellco Partnership, the entity that does business as Verizon Wireless, and gives the organisation as Verizon Business, with a registration date of 4 September 2001. A WHOIS query on a phone's address therefore hands back a name that reads like the enterprise arm. The prefixes above are the largest currently announced on AS6167, and the AS6167 page carries the rest of the registry detail.
The reverse DNS settles it faster than the WHOIS does. Addresses on this network answer in the myvzw.com zone, with the hostname naming the block rather than the full address - 97.160.0.1 answers as 1.sub-97-160-0.myvzw.com. That zone is the mobile network. Verizon's wireline and business space is a different autonomous system, AS701, covered separately on the Verizon IP ranges page, so an address sits on one network or the other and the PTR tells you which.
Reading a Verizon Wireless address in a log
AS6167 announces over two thousand IPv4 prefixes and more than a thousand IPv6 ones, which is a large footprint for a network that hosts nothing at all. Everything on it is a subscriber session - phones, tablets, hotspots and fixed-wireless gateways - so an address here is a poor candidate for a hosting or proxy block, and a poor identifier for one person, because the pools are shared and reassigned as devices move between markets.
It also makes an inbound connection from this space worth a second look. Traffic arriving at a server from a mobile carrier is somebody browsing rather than a service calling an API, and a machine that appears to be listening on a cellular address is unusual enough to confirm rather than assume. What a match does prove is the network: the address was on Verizon's mobile side at the moment of the lookup, and nothing about it identifies the account behind it.
Related tools
Frequently asked questions
What IP ranges does Verizon Wireless use?
Verizon Wireless announces its addresses under AS6167, which ARIN records under the AS name CELLCO-PART - Cellco Partnership, the entity trading as Verizon Wireless - registered on 4 September 2001. The largest blocks currently routed there are listed above. No allowlist is published, so the ARIN record and the routing table are the sources.
Why does a Verizon Wireless IP appear in my privacy test?
A Verizon Wireless address as your visible IP means traffic left over the cellular network with no tunnel carrying it. It is not the same network as the Verizon broadband and business space on AS701, and it says less about where you are than a fixed line would: mobile addresses come from pools attached to the gateway serving the session rather than to a street address.
Why does a Verizon Wireless IP show as Verizon Business in WHOIS?
Because that is the name on the record. ARIN registers AS6167 to Cellco Partnership under the organisation Verizon Business, so a registry lookup on a phone's address returns the enterprise name rather than the consumer brand. The reverse DNS is the quicker tell: mobile addresses answer in the myvzw.com zone.
Is AS6167 the same network as AS701?
No. AS6167 is Verizon's mobile network and AS701 is its wireline and business network; they are separate autonomous systems with separate address space. This site covers AS701 on the Verizon IP ranges page. An address belongs to one or the other, never to both.
Can a VPN exit run on a Verizon Wireless address?
It would be unusual. This space is handed to subscriber devices rather than rented as compute, and mobile addresses are shared and reassigned, so there is no stable endpoint for a client to connect back to unless somebody has deliberately built one on a device they control.