[bug] unpublished IP addresses

We are seeing unpublished IP addresses connecting to our chat app:

172.170.1.80
172.170.1.81
172.170.1.82
172.170.1.86
172.170.241.83
172.170.241.85
172.170.241.92

None of these ranges are covered by the published json at /chatgpt-connectors.json that was last updated on the 2026-06-24.

I can see that this has happened several times before based on community posts

Please update the published range to cover all IPs currently in use.

Welcome to the developer community, @msandersfresha.

Thank you for bringing this to our attention. We have passed these details along to the team for review and will follow up when we have more information to share.

Hello, we have observed the following ranges as coming from openai with the usual openai-mcp/1.0.0 user-agent:

  • 4.201.232.64/28
  • 9.234.97.96/28
  • 20.250.136.64/28
  • 48.221.184.80/28
  • 51.59.24.64/27
  • 51.59.48.80/28
  • 145.132.136.96/28
  • 172.162.248.64/28
  • 172.170.1.80/28
  • 172.170.225.0/28
  • 172.170.241.80/28

Can you please confirm? in case they are legit, why you have not updated the official json?
Thanks.

Thank you for flagging this.

The chatgpt-connectors.json manifest has since been refreshed("creationTime": "2026-07-08T21:09:35.438525") , and now covers all the IP/ranges shared in the thread.

One note: 51.59.24.64/27 appears in the manifest as two adjacent /28 ranges: 51.59.24.64/28 and 51.59.24.80/28. Together, these cover the same address space.

If you continue to observe connector traffic from IPs that are not included in the current manifest, please share the source IPs, timestamps, and observed user-agent values so we can pass the details along for review.

I strongly, strongly recommend using mTLS to validate ChatGPT access instead of IP allowlisting. Our IP ranges are best effort, and will remain so for the time being; mTLS provides a much stronger security guarantee.