aws

Amazon Web Services publishes 17,794 IP ranges.

Short answer

Amazon Web Services publishes every public address range it uses in ip-ranges.json, tagged by region and by service (EC2, CloudFront, S3, Route 53 health checks and more). The AMAZON service covers all of them; the other tags are subsets.

IPv4 prefixes10,739
IPv6 prefixes7,055
Sub-lists27
Provider’s file date2026-11-05-23-07-05
Fetched by peekip6 Nov 2026
StatusFetched OK

What it’s for

Use it to allow AWS services through a firewall, to recognise traffic from EC2 servers (including VPNs and bots hosted there), or to check that a request really came from CloudFront.

Sub-lists

Sub-lists with a written explanation are described on their own page.

Prefixes

PrefixRegion / locationService
1.178.1.0/24us-west-2EC2
1.178.1.0/24us-west-2AMAZON
1.178.10.0/24eu-central-1AMAZON
1.178.10.0/24eu-central-1S3
1.178.10.0/24eu-central-1EC2
1.178.100.0/24us-west-1AMAZON
1.178.100.0/24us-west-1EC2
1.178.100.0/24us-west-1S3
1.178.101.0/24ap-northeast-3S3
1.178.101.0/24ap-northeast-3EC2
1.178.101.0/24ap-northeast-3AMAZON
1.178.102.0/24ap-southeast-5AMAZON
1.178.102.0/24ap-southeast-5EC2
1.178.102.0/24ap-southeast-5S3
1.178.103.0/24ap-east-1AMAZON
1.178.103.0/24ap-east-1EC2
1.178.103.0/24ap-east-1S3
1.178.11.0/24ap-southeast-2EC2
1.178.11.0/24ap-southeast-2AMAZON
1.178.11.0/24ap-southeast-2S3
1.178.16.0/24me-south-1AMAZON
1.178.16.0/24me-south-1EC2
1.178.16.0/24me-south-1S3
1.178.17.0/24eu-south-1S3
1.178.17.0/24eu-south-1EC2
1.178.17.0/24eu-south-1AMAZON
1.178.172.0/23GLOBALGLOBALACCELERATOR
1.178.172.0/23GLOBALAMAZON
1.178.174.0/24eu-north-1EC2
1.178.174.0/24eu-north-1AMAZON
1.178.18.0/24af-south-1AMAZON
1.178.18.0/24af-south-1S3
1.178.18.0/24af-south-1EC2
1.178.19.0/24ap-southeast-3S3
1.178.19.0/24ap-southeast-3EC2
1.178.19.0/24ap-southeast-3AMAZON
1.178.20.0/24me-central-1EC2
1.178.20.0/24me-central-1S3
1.178.20.0/24me-central-1AMAZON
1.178.21.0/24eu-central-2AMAZON
1.178.21.0/24eu-central-2S3
1.178.21.0/24eu-central-2EC2
1.178.22.0/24eu-south-2EC2
1.178.22.0/24eu-south-2AMAZON
1.178.22.0/24eu-south-2S3
1.178.23.0/24ap-south-2EC2
1.178.23.0/24ap-south-2S3
1.178.23.0/24ap-south-2AMAZON
1.178.24.0/24ap-southeast-4AMAZON
1.178.24.0/24ap-southeast-4EC2
Showing 50 of 17,794 prefixes All prefixes (CSV)

What changed

  • 6 Nov 2026
    + 13.166.0.0/15
    + 2600:f0fb:c900:9000::/52
    + 2600:f0fb:c900:9000::/52
    + 2600:f0fb:ca00:5000::/52
    + 2600:f0fb:ca00:5000::/52
    + 2606:7b40:1b0c:400::/56
    + 2606:7b40:1b0c:400::/56
    + 2606:7b40:1b0f:8200::/56
    + 2606:7b40:1b0f:8200::/56
    + 2a01:578:0:7b00::/56
    
  • 5 Nov 2026
    + 1.178.86.0/24
    + 1.178.86.0/24
    + 71.137.22.0/23
    + 71.137.24.0/23
    + 71.137.26.0/23
    + 71.137.28.0/23
    
  • 4 Nov 2026
    + 13.217.76.0/23
    + 173.83.239.0/24
    + 173.83.239.0/24
    + 173.83.240.0/24
    + 173.83.240.0/24
    + 2600:1f15:2000::/36
    + 2600:1f15:2000::/36
    + 2600:1f19:2000::/36
    + 2600:1f19:2000::/36
    + 2600:f0f0:9::/48
    + 2600:f0f0:9::/48
    + 2600:f0f3:f010:b00::/56
    + 2600:f0f3:f010:b00::/56
    + 32.201.88.0/23
    + 35.54.16.0/20
    + 75.47.128.0/18
    + 75.47.128.0/18
    + 76.197.128.0/18
    + 76.197.128.0/18
    − 35.54.16.0/20
    
  • 3 Nov 2026
    + 40.163.1.0/24
    + 40.163.1.0/24
    + 40.163.2.0/24
    + 40.163.2.0/24
    + 40.163.3.0/24
    + 40.163.3.0/24
    − 1.178.86.0/24
    − 1.178.86.0/24
    
  • 2 Nov 2026
    + 1.178.86.0/24
    + 1.178.86.0/24
    
  • 31 Oct 2026
    + 13.251.113.64/26
    + 13.251.116.0/23
    + 18.143.204.64/26
    + 2001:3fc1:4000::/36
    + 2001:3fc1:4000::/36
    + 2600:f0f0:4300::/46
    + 2600:f0f0:4300::/46
    + 2600:f0f0:4304::/46
    + 2600:f0f0:4304::/46
    + 2600:f0f0:4308::/46
    + 2600:f0f0:4308::/46
    + 2600:f0f0:430c::/46
    + 2600:f0f0:430c::/46
    + 2600:f0f0:4310::/46
    

Allowlist formats

nginx (first 5 prefixes)
allow 1.178.1.0/24;
allow 1.178.1.0/24;
allow 1.178.10.0/24;
allow 1.178.10.0/24;
allow 1.178.10.0/24;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 1.178.1.0/24 -j ACCEPT
iptables -A INPUT -s 1.178.1.0/24 -j ACCEPT
iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT
iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT
iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Amazon Web Services: published IP ranges · checked 6 Nov 2026
  2. Amazon Web Services documentation