Amazon Web Services uses 254 prefixes for IVS_REALTIME.
Short answer
Amazon Web Services lists these prefixes under “IVS_REALTIME”. Amazon Web Services publishes every public address range it uses in ip-ranges.json, tagged by region and by service (EC2, CloudFront, S3, Route 53 health checks and more). The AMAZON service covers all of them; the other tags are subsets.
Prefixes
What changed
No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.
Allowlist formats
nginx (first 5 prefixes)
allow 103.53.48.0/22; allow 185.42.204.0/22; allow 192.108.239.0/24; allow 192.16.64.0/21; allow 199.9.248.0/21; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 103.53.48.0/22 -j ACCEPT iptables -A INPUT -s 185.42.204.0/22 -j ACCEPT iptables -A INPUT -s 192.108.239.0/24 -j ACCEPT iptables -A INPUT -s 192.16.64.0/21 -j ACCEPT iptables -A INPUT -s 199.9.248.0/21 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Amazon Web Services: published IP ranges · checked 5 Nov 2026
- Amazon Web Services documentation