cloud-ip-ranges

AWS IP ranges

Current IP ranges (CIDRs) used by the AWS cloud infrastructure, updated daily.

categoryDatacenter & Hosting
websitehttps://aws.amazon.com
ranges11,334 (7,862 IPv4, 3,472 IPv6)
last change
downloads7,096
download txt csv json — permalinks, always the latest data 
curl -O https://cloud-ip-ranges.com/download/aws.txt

Ranges

Sample of 25 of 11,334 ranges. Download the full list above, or check a specific IP.

CIDR Type Region Tag
1.178.1.0/24 ipv4 us-west-2 AMAZON
2001:3fc0:800::/40 ipv6 eusc-de-east-1 AMAZON
3.6.70.76/30 ipv4 ap-south-1 AMAZON_APPFLOW
13.210.2.192/26 ipv4 ap-southeast-2 AMAZON_CONNECT
3.7.10.0/23 ipv4 ap-south-1 API_GATEWAY
3.41.208.0/25 ipv4 us-east-1 AURORA_DSQL
2406:da12:8f1:3d00::/56 ipv6 ap-northeast-2 AURORA_DSQL
3.80.16.0/23 ipv4 us-east-1 CHIME_VOICECONNECTOR
3.10.127.32/27 ipv4 eu-west-2 CLOUD9
3.10.17.128/25 ipv4 eu-west-2 CLOUDFRONT
52.82.128.0/23 ipv4 GLOBAL CLOUDFRONT_ORIGIN_FACING
2406:da10:847f:a100::/56 ipv6 ap-southeast-5 CLOUDFRONT_ORIGIN_FACING
3.26.127.24/29 ipv4 ap-southeast-2 CODEBUILD
3.218.180.0/22 ipv4 us-east-1 DYNAMODB
3.26.82.236/30 ipv4 ap-southeast-2 EBS
70.232.86.124/32 ipv4 ap-southeast-4 EC2
2620:108:700f::/64 ipv6 us-west-2 EC2
3.0.5.32/29 ipv4 ap-southeast-1 EC2_INSTANCE_CONNECT
2400:7fc0:86fd:e00::/56 ipv6 cn-north-1 EC2_INSTANCE_CONNECT
3.103.180.128/25 ipv4 ap-southeast-6 EFS
2400:7fc0:833b:f400::/56 ipv6 cn-north-1 EFS
3.30.40.84/30 ipv4 us-gov-west-1 KINESIS_VIDEO_STREAMS
3.27.127.176/29 ipv4 ap-southeast-2 MEDIA_PACKAGE_V2
3.4.24.0/23 ipv4 us-gov-east-1 ROUTE53
2001:3fc6:8::/47 ipv6 eusc-de-east-1 ROUTE53

Blocking AWS

iptables

curl -sO https://cloud-ip-ranges.com/download/aws.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < aws.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/aws.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < aws.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/aws-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/aws-block.conf << EOF
[aws-block]
enabled = true
filter = aws-block
action = iptables-allports[name=aws]
logpath = /tmp/aws.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/aws.txt https://cloud-ip-ranges.com/download/aws.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/aws.txt
# Firewall > Aliases: new alias AWS_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=AWS_BLOCK

About

These IP ranges are sourced directly from AWS's official feeds and are updated regularly to ensure accuracy. The data includes IPv4 and IPv6 ranges used by AWS's infrastructure worldwide. Last update was about 11 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler