Add new providers (#22)

* Add Apple proxy

* Add ProtonVPN

* Fix download OpenAI 

* Improve workflow

.github/workflows/update.yml

@@ -13,36 +13,12 @@ jobs:
           fetch-depth: 0
 
       - name: Install WHOIS client
-        run: sudo apt install -y whois
+        run: sudo apt install -y whois parallel gawk
-
-      - name: Download IPs
-        run: |
-          set -x
-          bash google/downloader.sh
-          bash googlebot/downloader.sh
-          bash amazon/downloader.sh
-          bash microsoft/downloader.sh
-          bash oracle/downloader.sh
-          bash digitalocean/downloader.sh
-          bash bing/downloader.sh
-          bash github/downloader.sh
-          bash facebook/downloader.sh
-          bash twitter/downloader.sh
-          bash linode/downloader.sh
-          bash telegram/downloader.sh
-          bash openai/downloader.sh || echo 'GPTBot download failed'  # TODO: fixme
-          bash cloudflare/downloader.sh
-          bash vultr/downloader.sh
-
-      - name: Create All-In-One ranges
-        run: |
-          cat google/ipv4.txt googlebot/ipv4.txt amazon/ipv4.txt microsoft/ipv4.txt oracle/ipv4.txt digitalocean/ipv4.txt bing/ipv4.txt github/ipv4.txt facebook/ipv4.txt twitter/ipv4.txt linode/ipv4.txt telegram/ipv4.txt openai/ipv4.txt cloudflare/ipv4.txt vultr/ipv4.txt | sort -V | uniq > all/ipv4.txt
-          cat google/ipv6.txt googlebot/ipv6.txt amazon/ipv6.txt microsoft/ipv6.txt digitalocean/ipv6.txt github/ipv6.txt facebook/ipv6.txt twitter/ipv6.txt linode/ipv6.txt telegram/ipv6.txt cloudflare/ipv6.txt vultr/ipv6.txt | sort -V | uniq > all/ipv6.txt
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.13' 
+          python-version: '3.13'
 
       - name: Cache pip
         uses: actions/cache@v4
@@ -57,44 +33,28 @@ jobs:
         run: |
           pip install -r utils/requirements.txt
 
-      - name: Merge Ranges
+      - name: Download IPs
         run: |
           set -euo pipefail
           set -x
-          # ipv4
+          find . -name downloader.sh | sort -h | awk '{print "Executing "$1"...";system("bash "$1)}'
-          python utils/merge.py --source=google/ipv4.txt | sort -V > google/ipv4_merged.txt
+
-          python utils/merge.py --source=googlebot/ipv4.txt | sort -V > googlebot/ipv4_merged.txt
+      - name: Create All-In-One ranges
-          python utils/merge.py --source=amazon/ipv4.txt | sort -V > amazon/ipv4_merged.txt
+        run: |
-          python utils/merge.py --source=microsoft/ipv4.txt | sort -V > microsoft/ipv4_merged.txt
+          cat $(find . -name ipv4.txt | sort -h) | sort -V | uniq > all/ipv4.txt
-          python utils/merge.py --source=oracle/ipv4.txt | sort -V > oracle/ipv4_merged.txt
+          cat $(find . -name ipv6.txt | sort -h) | sort -V | uniq > all/ipv6.txt
-          python utils/merge.py --source=digitalocean/ipv4.txt | sort -V > digitalocean/ipv4_merged.txt
+
-          python utils/merge.py --source=bing/ipv4.txt | sort -V > bing/ipv4_merged.txt
+      - name: Merge ipv4 Ranges
-          python utils/merge.py --source=github/ipv4.txt | sort -V > github/ipv4_merged.txt
+        run: |
-          python utils/merge.py --source=facebook/ipv4.txt | sort -V > facebook/ipv4_merged.txt
+          set -euo pipefail
-          python utils/merge.py --source=twitter/ipv4.txt | sort -V > twitter/ipv4_merged.txt
+          set -x
-          python utils/merge.py --source=linode/ipv4.txt | sort -V > linode/ipv4_merged.txt
+          find . -name ipv4.txt | sort -h | parallel --will-cite -j 1 echo "Merging '{}'"';'python utils/merge.py --source={} '|'  sort -V '>' {.}_merged.txt
-          python utils/merge.py --source=telegram/ipv4.txt | sort -V > telegram/ipv4_merged.txt
+
-          python utils/merge.py --source=openai/ipv4.txt | sort -V > openai/ipv4_merged.txt
+      - name: Merge ipv6 Ranges
-          python utils/merge.py --source=cloudflare/ipv4.txt | sort -V > cloudflare/ipv4_merged.txt
+        run: |
-          python utils/merge.py --source=vultr/ipv4.txt | sort -V > vultr/ipv4_merged.txt
+          set -euo pipefail
-          python utils/merge.py --source=all/ipv4.txt | sort -V > all/ipv4_merged.txt
+          set -x
-          # ipv6
+          find . -name ipv6.txt | sort -h | parallel --will-cite -j 1 echo "Merging '{}'"';'python utils/merge.py --source={} '|' sort -V '>' {.}_merged.txt
-          python utils/merge.py --source=google/ipv6.txt | sort -V > google/ipv6_merged.txt
-          python utils/merge.py --source=googlebot/ipv6.txt | sort -V > googlebot/ipv6_merged.txt
-          python utils/merge.py --source=amazon/ipv6.txt | sort -V > amazon/ipv6_merged.txt
-          python utils/merge.py --source=microsoft/ipv6.txt | sort -V > microsoft/ipv6_merged.txt
-          # oracle not provide ipv6
-          python utils/merge.py --source=digitalocean/ipv6.txt | sort -V > digitalocean/ipv6_merged.txt
-          # bing not provide ipv6
-          python utils/merge.py --source=github/ipv6.txt | sort -V > github/ipv6_merged.txt
-          python utils/merge.py --source=facebook/ipv6.txt | sort -V > facebook/ipv6_merged.txt
-          python utils/merge.py --source=twitter/ipv6.txt | sort -V > twitter/ipv6_merged.txt
-          python utils/merge.py --source=linode/ipv6.txt | sort -V > linode/ipv6_merged.txt
-          python utils/merge.py --source=telegram/ipv6.txt | sort -V > telegram/ipv6_merged.txt
-          # openai not provide ipv6
-          python utils/merge.py --source=cloudflare/ipv6.txt | sort -V > cloudflare/ipv6_merged.txt
-          python utils/merge.py --source=vultr/ipv6.txt | sort -V > vultr/ipv6_merged.txt
-          python utils/merge.py --source=all/ipv6.txt | sort -V > all/ipv6_merged.txt
 
       - name: Commit files
         env:

README.md

@@ -2,7 +2,7 @@
 
 ![IP Ranges](logo.png)
 
-List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), DigitalOcean, GitHub, Facebook (Meta), Twitter, Linode, Telegram, OpenAI (GPTBot) and CloudFlare with daily updates.
+List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), DigitalOcean, GitHub, Facebook (Meta), Twitter, Linode, Telegram, OpenAI (GPTBot), CloudFlare, Vultr, Apple (Private Relay) and ProtonVPN with daily updates.
 
 All lists are obtained from public sources.
 
@@ -117,6 +117,20 @@ To allow GoogleBot, block all Google IP addresses and then allow the GoogleBot a
 - IPv6: https://raw.githubusercontent.com/lord-alfred/ipranges/main/vultr/ipv6.txt
 - IPv6 (merged): https://raw.githubusercontent.com/lord-alfred/ipranges/main/vultr/ipv6_merged.txt
 
+### Apple (Private Relay)
+
+- IPv4: https://raw.githubusercontent.com/lord-alfred/ipranges/main/apple-proxy/ipv4.txt
+- IPv4 (merged): https://raw.githubusercontent.com/lord-alfred/ipranges/main/apple-proxy/ipv4_merged.txt
+- IPv6: https://raw.githubusercontent.com/lord-alfred/ipranges/main/apple-proxy/ipv6.txt
+- IPv6 (merged): https://raw.githubusercontent.com/lord-alfred/ipranges/main/apple-proxy/ipv6_merged.txt
+
+### ProtonVPN (exit nodes)
+
+- IPv4: https://raw.githubusercontent.com/lord-alfred/ipranges/main/protonvpn/ipv4.txt
+- IPv4 (merged): https://raw.githubusercontent.com/lord-alfred/ipranges/main/protonvpn/ipv4_merged.txt
+- IPv6: https://raw.githubusercontent.com/lord-alfred/ipranges/main/protonvpn/ipv6.txt
+- IPv6 (merged): https://raw.githubusercontent.com/lord-alfred/ipranges/main/protonvpn/ipv6_merged.txt
+
 ## All-In-One IPs
 
 A list of IP addresses from all sources combined into one file.

apple-proxy/downloader.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -euo pipefail
+set -x
+
+# https://developer.apple.com/icloud/prepare-your-network-for-icloud-private-relay/
+curl -s https://mask-api.icloud.com/egress-ip-ranges.csv | cut -d',' -f1  > /tmp/apple-proxy.txt
+
+grep -v ':' /tmp/apple-proxy.txt > /tmp/apple-proxy-ipv4.txt
+grep ':' /tmp/apple-proxy.txt > /tmp/apple-proxy-ipv6.txt
+
+sort -V /tmp/apple-proxy-ipv4.txt | uniq > apple-proxy/ipv4.txt
+sort -V /tmp/apple-proxy-ipv6.txt | uniq > apple-proxy/ipv6.txt

openai/downloader.sh

@@ -8,12 +8,37 @@ set -x
 
 
 # get from public ranges
-curl -s https://openai.com/gptbot-ranges.txt > /tmp/openai.txt
+download_and_parse_json() {
+    curl --connect-timeout 60 --retry 3 --retry-delay 15 -s "${1}" \
+    -H 'accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' \
+    -H 'accept-language: en' \
+    -H 'cache-control: no-cache' \
+    -H 'pragma: no-cache' \
+    -H 'priority: u=0, i' \
+    -H 'sec-ch-ua: "Not(A:Brand";v="99", "Google Chrome";v="133", "Chromium";v="133"' \
+    -H 'sec-ch-ua-mobile: ?0' \
+    -H 'sec-ch-ua-platform: "macOS"' \
+    -H 'sec-fetch-dest: document' \
+    -H 'sec-fetch-mode: navigate' \
+    -H 'sec-fetch-site: none' \
+    -H 'sec-fetch-user: ?1' \
+    -H 'upgrade-insecure-requests: 1' \
+    -H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36' \
+    > /tmp/openai.json
 
-# save ipv4
+    jq '.prefixes[] | [.ipv4Prefix][] | select(. != null)' -r /tmp/openai.json > /tmp/openai.txt
-grep -v ':' /tmp/openai.txt > /tmp/openai-ipv4.txt
 
-# ipv6 not provided
+    # save ipv4
+    grep -v ':' /tmp/openai.txt >> /tmp/openai-ipv4.txt
+
+    # ipv6 not provided
+
+    sleep 10
+}
+
+download_and_parse_json "https://openai.com/chatgpt-user.json"
+download_and_parse_json "https://openai.com/searchbot.json"
+download_and_parse_json "https://openai.com/gptbot.json"
 
 
 # sort & uniq

openai/ipv4.txt

@@ -1,2 +1,35 @@
+4.196.118.112/28
+4.197.22.112/28
+4.227.36.0/25
+13.65.240.240/28
+20.42.10.176/28
+20.61.70.160/28
+20.97.189.96/28
+20.125.66.80/28
+20.161.75.208/28
+20.171.206.0/24
+20.171.207.0/24
+20.215.188.192/28
+23.98.142.176/28
+23.98.179.16/28
+40.84.180.64/28
+40.84.180.224/28
+40.84.221.208/28
+40.84.221.224/28
+51.8.102.0/24
+51.8.155.48/28
+51.8.155.64/28
+51.8.155.112/28
+52.156.77.144/28
+52.159.249.96/28
+52.225.75.208/28
 52.230.152.0/24
 52.233.106.0/24
+52.236.94.144/28
+135.234.64.0/24
+135.237.131.208/28
+172.178.140.144/28
+172.178.141.128/28
+172.182.193.160/28
+172.183.222.128/28
+172.203.190.128/28

protonvpn/downloader.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+set -euo pipefail
+set -x
+
+
+# get from public ranges
+curl -s https://api.protonvpn.ch/vpn/logicals > /tmp/protonvpn.json
+
+
+# get all prefixes without some keys
+jq '.LogicalServers[].Servers[].EntryIP' -r /tmp/protonvpn.json | tr -d '"' > /tmp/protonvpn-all.txt
+
+
+# save ipv4
+grep -v ':' /tmp/protonvpn-all.txt > /tmp/protonvpn-ipv4.txt
+
+# save ipv6
+grep ':' /tmp/protonvpn-all.txt > /tmp/protonvpn-ipv6.txt
+
+
+# sort & uniq
+sort -V /tmp/protonvpn-ipv4.txt | uniq > protonvpn/ipv4.txt
+sort -V /tmp/protonvpn-ipv6.txt | uniq > protonvpn/ipv6.txt