Web Application Firewall (Chinese Mainland) plans to adjust back-to-origin CIDR blocks on October 15, 2024. The following CIDR blocks will be changed:

1. Offline CIDR blocks：

• 101.200.106.0/24
• 106.15.101.96/27
• 120.55.177.0/24
• 121.43.18.0/24
• 39.104.199.128/26
• 120.55.107.0/24
• 47.104.53.0/26
• 47.108.23.192/26
• 47.99.20.0/24

1. Adjust CIDR blocks：

• 112.124.159.0/24 adjust to 112.124.159.192/27, 112.124.159.128/27, 112.124.159.96/27
• 118.178.15.0/24 adjust to 118.178.15.64/27, 118.178.15.96/27, 118.178.15.128/27, 118.178.15.160/27, 118.178.15.224/27
• 120.27.173.0/24 adjust to 120.27.173.0/27, 120.27.173.32/27, 120.27.173.64/27, 120.27.173.96/27
• 47.110.182.0/24 adjust to 47.110.182.0/25, 47.110.182.128/26
• 120.76.16.0/24 adjust to 120.76.16.0/26, 120.76.16.128/26, 120.76.16.224/27
• 47.106.31.0/24 adjust to 47.106.31.128/26, 47.106.31.192/26
• 123.57.117.0/24 adjust to 123.57.117.128/27, 123.57.117.160/27
• 39.96.119.0/24 adjust to 39.96.119.64/26, 39.96.119.128/26, 39.96.119.192/26
• 39.96.130.0/24 adjust to 39.96.130.0/26, 39.96.130.64/26, 39.96.130.128/26

If you are using WAF2.0, you can navigate to service information page and click Copy All IP Addresses in the upper-right corner or use OpenAPI to obtain the complete list of back-to-origin CIDR blocks. We recommend using OpenAPI to obtain real-time updates on back-to-origin CIDR blocks.

If you are using WAF3.0, you can navigate to website configuration page and click Back-to-origin CIDR Blocks in the upper-right corner or use OpenAPI to obtain the complete list of back-to-origin CIDR blocks. We recommend using OpenAPI to obtain real-time updates on back-to-origin CIDR blocks.

IMPORTANT:

If you have configured access control policies on your origin server to limit source IP addresses, we suggest updating the ACL policies as soon as possible.

If you have any questions, submit a ticket or contact us in the DingTalk service group for consultation. Thank you for your support and cooperation.