IPv4 Bogon Ranges (Static Bogon Table)

Page Title: IPv4 Bogon Ranges — What They Are and Why They Matter

Overview
Bogons are IPv4 address ranges that should never appear on the public Internet because they are either unallocated, reserved, private, or otherwise non-routable. When bogon addresses appear in firewall logs, SIEM alerts, packet captures, or threat intelligence feeds, they are almost always indicators of:

• Misconfigurations

• Malicious scanning

• IP spoofing

• Botnet activity

• Outbound leaks from improperly secured networks

This CSV provides a static, foundational bogon table based on RFC-defined non-routable IPv4 ranges. While live bogon lists change as IP space is allocated over time, certain ranges will always be bogons.

What This CSV Contains

This CSV includes:

• RFC1918 private ranges

• Loopback ranges

• Link-local ranges

• Documentation-only networks

• Benchmarking networks

• Multicast ranges (when used as unicast)

• Reserved or experimental blocks

• The universal broadcast address

Each entry includes:

• CIDR range

• Category

• Detailed explanation

This CSV is perfect for:

• Security analysts

• Firewall engineers

• SIEM tuning

• Threat detection modeling

• SOC documentation

• Basic networking education