Amazon Web Services uses 4,487 prefixes for EC2.
Short answer
EC2 covers the public addresses of EC2 instances (and Elastic IPs) in each region. Traffic from a VPN, proxy or bot hosted on AWS usually comes from these ranges.
Prefixes
What changed
- 5 Nov 2026
+ 1.178.86.0/24 - 4 Nov 2026
+ 173.83.239.0/24 + 173.83.240.0/24 + 2600:1f15:2000::/36 + 2600:1f19:2000::/36 + 2600:f0f3:f010:b00::/56 + 75.47.128.0/18 + 76.197.128.0/18 − 35.54.16.0/20
- 3 Nov 2026
+ 40.163.1.0/24 + 40.163.2.0/24 + 40.163.3.0/24 − 1.178.86.0/24
- 2 Nov 2026
+ 1.178.86.0/24 - 31 Oct 2026
+ 2001:3fc1:4000::/36 + 2600:f0f0:4300::/46 + 2600:f0f0:4304::/46 + 2600:f0f0:4308::/46 + 2600:f0f0:430c::/46 + 2600:f0f0:4310::/46 + 2600:f0f0:4314::/46 + 2600:f0f0:4318::/46 + 2600:f0f0:431c::/46 + 2600:f0f0:4320::/46 + 2600:f0f0:4324::/46 + 2606:7b40:1dd1:fc00::/60 + 2606:7b40:1dd2:fc00::/60 + 2606:7b40:1dd3:fc00::/60 + 2606:7b40:1dd4:5c00::/60 + 2606:7b40:1dd4:fc00::/60 + 51.74.64.0/18 + 72.150.20.0/24
- 30 Oct 2026
+ 72.150.0.0/23 + 72.150.10.0/23 + 72.150.12.0/23 + 72.150.14.0/23 + 72.150.16.0/23 + 72.150.18.0/23 + 72.150.2.0/23 + 72.150.4.0/23 + 72.150.6.0/23 + 72.150.8.0/23 − 1.178.86.0/24 − 2606:7b40:1800::/40
- 29 Oct 2026
+ 2600:f0f3:f010:2900::/56 - 26 Oct 2026
+ 1.178.86.0/24 - 25 Oct 2026
+ 2606:7b40:1dd4:c000::/60 − 1.178.86.0/24 − 2606:7b40:1dd4:5c00::/60
- 24 Oct 2026
+ 2600:f0f3:f010:2400::/56 + 2606:7b40:1dd4:5c00::/60 + 2606:7b40:1dd4:7400::/60 + 2606:7b40:1dd4:9000::/60 + 2606:7b40:1dd4:d400::/60 + 2606:7b40:1dd4:d800::/60 + 2606:7b40:1dd4:dc00::/60 + 2606:7b40:1dd4:e000::/60 + 2606:7b40:1dd4:f000::/60 + 2606:7b40:1dd4:f400::/60
- 23 Oct 2026
+ 2600:f0f3:f010:2500::/56
Allowlist formats
nginx (first 5 prefixes)
allow 1.178.1.0/24; allow 1.178.10.0/24; allow 1.178.100.0/24; allow 1.178.101.0/24; allow 1.178.102.0/24; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 1.178.1.0/24 -j ACCEPT iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT iptables -A INPUT -s 1.178.100.0/24 -j ACCEPT iptables -A INPUT -s 1.178.101.0/24 -j ACCEPT iptables -A INPUT -s 1.178.102.0/24 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Amazon Web Services: published IP ranges · checked 5 Nov 2026
- Amazon Web Services documentation