Sign inMonitor a domain
aws · CLOUDFRONT

Amazon Web Services uses 251 prefixes for CLOUDFRONT.

Last updated 6 Nov 2026 from Amazon Web Services’s own list (file dated 2026-11-05-23-07-05)

Short answer

CLOUDFRONT lists the edge locations of Amazon’s CDN. A site behind CloudFront sees requests from these addresses.

IPv4 prefixes216
IPv6 prefixes35
Regions in the first 100GLOBAL, ap-northeast-1, ap-northeast-2, eu-west-2, ap-south-1, ap-southeast-2, ap-southeast-1, us-east-2 …
Fetched by peekip6 Nov 2026

Prefixes

PrefixRegion / locationService
108.138.0.0/15GLOBALCLOUDFRONT
108.156.0.0/14GLOBALCLOUDFRONT
111.13.171.128/26GLOBALCLOUDFRONT
111.13.171.192/26GLOBALCLOUDFRONT
111.13.185.32/27GLOBALCLOUDFRONT
111.13.185.64/27GLOBALCLOUDFRONT
116.129.226.0/25GLOBALCLOUDFRONT
116.129.226.128/26GLOBALCLOUDFRONT
118.193.97.128/25GLOBALCLOUDFRONT
118.193.97.64/26GLOBALCLOUDFRONT
119.147.182.0/25GLOBALCLOUDFRONT
119.147.182.128/26GLOBALCLOUDFRONT
120.232.236.0/25GLOBALCLOUDFRONT
120.232.236.128/26GLOBALCLOUDFRONT
120.253.240.192/26GLOBALCLOUDFRONT
120.253.241.160/27GLOBALCLOUDFRONT
120.253.245.128/26GLOBALCLOUDFRONT
120.253.245.192/27GLOBALCLOUDFRONT
120.52.12.64/26GLOBALCLOUDFRONT
120.52.153.192/26GLOBALCLOUDFRONT
120.52.22.96/27GLOBALCLOUDFRONT
120.52.39.128/27GLOBALCLOUDFRONT
13.113.196.64/26ap-northeast-1CLOUDFRONT
13.113.203.0/24ap-northeast-1CLOUDFRONT
13.124.199.0/24ap-northeast-2CLOUDFRONT
13.134.24.0/23eu-west-2CLOUDFRONT
13.134.94.0/23eu-west-2CLOUDFRONT
13.203.133.0/26ap-south-1CLOUDFRONT
13.210.67.128/26ap-southeast-2CLOUDFRONT
13.224.0.0/14GLOBALCLOUDFRONT
13.228.69.0/24ap-southeast-1CLOUDFRONT
13.233.177.192/26ap-south-1CLOUDFRONT
13.249.0.0/16GLOBALCLOUDFRONT
13.32.0.0/15GLOBALCLOUDFRONT
13.35.0.0/16GLOBALCLOUDFRONT
13.54.63.128/26ap-southeast-2CLOUDFRONT
13.59.250.0/26us-east-2CLOUDFRONT
130.176.0.0/17GLOBALCLOUDFRONT
130.176.128.0/18GLOBALCLOUDFRONT
130.176.192.0/19GLOBALCLOUDFRONT
130.176.224.0/20GLOBALCLOUDFRONT
143.204.0.0/16GLOBALCLOUDFRONT
144.220.0.0/16GLOBALCLOUDFRONT
15.158.0.0/16GLOBALCLOUDFRONT
15.188.184.0/24eu-west-3CLOUDFRONT
15.207.13.128/25ap-south-1CLOUDFRONT
15.207.213.128/25ap-south-1CLOUDFRONT
18.154.0.0/15GLOBALCLOUDFRONT
18.160.0.0/15GLOBALCLOUDFRONT
18.164.0.0/15GLOBALCLOUDFRONT
Showing 50 of 251 prefixes All prefixes (CSV)

What changed

  • 4 Nov 2026
    + 2600:f0f0:9::/48
  • 31 Oct 2026
    + 51.72.40.128/28
+ 51.72.40.144/28
  • 16 Oct 2026
    + 2001:3fc6:4::/48
+ 2001:3fc6:5::/48
+ 51.74.20.0/24
+ 51.74.21.0/24
+ 51.74.22.0/24

Allowlist formats

nginx (first 5 prefixes)
allow 108.138.0.0/15;
allow 108.156.0.0/14;
allow 111.13.171.128/26;
allow 111.13.171.192/26;
allow 111.13.185.32/27;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 108.138.0.0/15 -j ACCEPT
iptables -A INPUT -s 108.156.0.0/14 -j ACCEPT
iptables -A INPUT -s 111.13.171.128/26 -j ACCEPT
iptables -A INPUT -s 111.13.171.192/26 -j ACCEPT
iptables -A INPUT -s 111.13.185.32/27 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Amazon Web Services: published IP ranges · checked 6 Nov 2026
  2. Amazon Web Services documentation