AWS IP Map

Live, synced with AWS

AWS IP address ranges, made easy to look up.

AWS publishes all 17,475 of its public IP ranges as one 2.7 MB JSON file. Search them here instead: paste an IP, a CIDR or a whole list and get the region, service and network border group instantly.

Try

Hilbert-curve map of the entire IPv4 internet with AWS's published ranges coloured by region

The whole IPv4 internet

101.9 million AWS addresses, 2.37% of IPv4

All 4.3 billion addresses on a Hilbert curve. Each tile is a /8, each pixel a /20. Click a tile to zoom in; search an IP and the map goes straight to it.

Allowlist builder

Pick a service and region, choose a format, copy. Turn on merging to collapse overlapping and adjacent prefixes into the smallest CIDR list, which helps when security groups or prefix lists cap your entries.

These ranges change often. A list you paste once will go out of date. For anything long-lived, fetch it automatically from the plain-text API or react to AWS's own change notifications (the AmazonIpSpaceChanged SNS topic).

Loading ranges...

AWS's IPv4 space grew 6.8x since Nov 2015.

From 15.1 million to 101.9 million public addresses. Reconstructed from 1,436 archived versions of ip-ranges.json; hover the chart to read any month.

IPv4 addresses
101.9 million
IPv4 prefixes
10,550
IPv6 prefixes
6,925
Region codes
42 3 unannounced
Service codes
27
030M60M90M120M20162017201820192020202120222023202420252026Global 4.9MGovCloud 1.9MChina 946kAsia Pacific 22.5MMiddle East, Africa 4.4MEurope 21.1MSouth America 1.9MNorth America 44.3M

When each region code first appeared

  1. By Nov 2015us-east-1us-west-1us-west-2sa-east-1eu-central-1eu-west-1ap-northeast-1ap-southeast-1ap-southeast-2cn-north-1us-gov-west-1
  2. 2016ap-northeast-2ap-south-1us-east-2ca-central-1eu-west-2
  3. 2017eu-west-3cn-northwest-1eu-north-1us-gov-east-1
  4. 2018ap-northeast-3me-south-1
  5. 2019af-south-1ap-east-1
  6. 2020eu-south-1ap-southeast-3ap-south-2me-central-1
  7. 2021eu-south-2eu-central-2ap-southeast-4
  8. 2022il-central-1ap-southeast-6ca-west-1
  9. 2023ap-southeast-5eusc-de-east-1
  10. 2024mx-central-1ap-east-2ap-southeast-7me-west-1not yet announced
  11. 2025sa-west-1not yet announced
  12. 2026us-south-1not yet announced

Recent changes Full log

  1. +0 -2
  2. +2 -0
  3. +0 -2
  4. +2 -0

Browse by region

North America

South America

Europe

Middle East and Africa

Asia Pacific

China

GovCloud

Global

Browse by service

For scripts and pipelines

Every region, service and region-service pair has plain-text and CSV files at a stable URL, regenerated on every change.

curl -s https://manishh-13.github.io/aws-ip-map/services/cloudfront/ipv4.txt curl -s https://manishh-13.github.io/aws-ip-map/regions/ap-south-1/s3/ipv4.txt

See all endpoints

Questions

Where does AWS publish its IP address ranges?

AWS publishes its current IP address ranges as a JSON file at ip-ranges.amazonaws.com/ip-ranges.json. Each entry has a CIDR prefix, a region, a network border group and a service code. This site mirrors that file, indexes it, and keeps its history.

How often do AWS IP ranges change?

Often: AWS republishes the file whenever its address space changes, sometimes several times a day. In 2025 it changed 698 times. Every version carries a syncToken (the publication time in Unix epoch format). This site checks for a new token every 30 minutes and records exactly which prefixes were added or removed on the change log, with the full history back to Nov 2015 on the History page.

How do I check whether an IP address belongs to AWS?

Paste it into the search box at the top of this page. You get every published AWS prefix that contains it, with region, service and network border group. Paste a whole list (logs, firewall exports) to check many at once. If an address isn't in any published prefix, it isn't in AWS's published ranges today; the search also tells you if it used to be.

What is the difference between the AMAZON service code and EC2 or S3?

AWS's documentation says every subset is also in the AMAZON subset, so AMAZON is the superset; some ranges appear only under AMAZON. When one service uses another's resources, a range can appear under both codes: S3 uses EC2 resources, so some ranges are listed under both S3 and EC2 but are used only by S3. To find ranges used only by EC2, take the EC2 ranges that are not also listed under S3. Source: AWS IP range JSON syntax.

Are the API_GATEWAY ranges for inbound or outbound traffic?

Outbound. The AWS documentation states that the addresses listed for API_GATEWAY are egress only.

How can I get notified when AWS IP ranges change?

AWS sends a notification to the Amazon SNS topic arn:aws:sns:us-east-1:806199016981:AmazonIpSpaceChanged (in us-east-1) on every change, as described in AWS IP address ranges notifications. If you'd rather not run anything, subscribe to this site's Atom feed.

Why does a prefix in the file not match what I see in BGP?

AWS notes that it may advertise a prefix in more specific ranges. For example, 96.127.0.0/17 in the file may be advertised as several smaller blocks. Matching on the published prefix still works, because the smaller blocks sit inside it.

Why do some region codes say "not yet announced"?

Region codes sometimes appear in ip-ranges.json before AWS's documentation lists them. This site shows the code exactly as it appears in the file and doesn't guess a name until AWS publishes one.