IP Intelligence Authority Platform
Amazon Web Services (AWS) IP ranges
Amazon Web Services (AWS) uses 7,941 IPv4 blocks and 3,530 IPv6 blocks, covering about 102 million unique IPv4 addresses, announced from AS16509 and AS14618. IPDebrief has analysed 29,246 addresses in these ranges; 2,296 (7.9%) currently carry a higher risk score.
- IPv4 blocks
- 7,941
- IPv6 blocks
- 3,530
- Unique IPv4 addresses
- 102,043,545
- Regions
- 42
- Analysed addresses
- 29,246
- Higher risk
- 7.9%
Range data updated 2026-11-07
About Amazon Web Services (AWS)
Amazon Web Services is the largest public cloud platform, running EC2 virtual machines, load balancers, Lambda functions, the CloudFront CDN and hundreds of managed services across regions worldwide. AWS publishes its address ranges with the region and service that uses each block, which lets defenders distinguish, for example, EC2 instances in us-east-1 from CloudFront edge locations.
What traffic from AWS addresses usually means
Cloud addresses host websites, APIs, mail relays, CI runners and monitoring services, so most traffic from them is automated. That is usually legitimate server-to-server traffic, but because capacity can be rented in minutes, cloud ranges are also a common source of scanning, credential stuffing and scraping. Traffic from a cloud address to a consumer login or checkout page is rarely a person using a browser.
How to verify a AWS IP address
AWS ranges are tagged by region and service. An address inside an EC2 range is a customer-controlled virtual machine, so the owner of the traffic is the AWS customer, not Amazon; abuse reports go to AWS, which forwards them to the customer.
Largest AWS IPv4 ranges
44.192.0.0/1144.224.0.0/113.64.0.0/123.80.0.0/123.208.0.0/123.224.0.0/1234.192.0.0/1234.208.0.0/12
Top regions by address blocks
us-east-1us-west-2eu-central-1us-west-1us-east-2eu-west-1ap-southeast-1eu-west-2ap-northeast-1ap-southeast-2sa-east-1ap-south-1
All AWS regions
- af-south-1
- ap-east-1
- ap-east-2
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-south-1
- ap-south-2
- ap-southeast-1
- ap-southeast-2
- ap-southeast-3
- ap-southeast-4
- ap-southeast-5
- ap-southeast-6
- ap-southeast-7
- ca-central-1
- ca-west-1
- cn-north-1
- cn-northwest-1
- eu-central-1
- eu-central-2
- eu-north-1
- eu-south-1
- eu-south-2
- eu-west-1
- eu-west-2
- eu-west-3
- eusc-de-east-1
- il-central-1
- me-central-1
- me-south-1
- me-west-1
- mx-central-1
- sa-east-1
- sa-west-1
- us-east-1
- us-east-2
- us-gov-east-1
- us-gov-west-1
- us-south-1
- us-west-1
- us-west-2
AWS networks (ASNs)
Recently analysed AWS addresses
- 35.80.180.156
- 47.128.111.139
- 47.128.111.107
- 47.128.119.141
- 54.70.120.176
- 54.235.175.89
- 3.135.157.184
- 52.204.251.143
- 52.12.79.220
- 83.119.138.150
- 35.161.116.203
- 50.16.16.211
- 34.245.242.243
- 34.254.219.36
- 35.155.165.142
- 44.205.28.185
- 161.193.11.191
- 3.232.242.104
- 18.100.101.26
- 174.129.216.2
- 54.190.138.115
- 18.97.9.99
- 52.88.88.85
- 54.195.83.27
- 52.72.206.248
- 184.73.164.218
- 44.242.37.196
- 40.176.111.185
- 40.176.81.134
- 52.205.121.244
- 100.27.168.88
- 54.89.196.169
- 32.187.123.113
- 34.204.119.63
- 99.86.224.93
- 52.205.93.115
- 34.192.250.93
- 34.252.28.38
- 44.232.102.151
- 3.208.114.114
- 3.223.170.98
- 52.45.185.1
- 32.199.40.112
- 35.169.86.3
- 98.86.85.54
- 54.202.76.251
- 44.211.113.189
- 100.20.30.136
- 13.209.101.124
- 184.195.215.161
- 44.193.108.184
- 184.197.73.97
- 44.231.23.99
- 35.80.159.55
- 52.218.182.97
- 13.33.102.223
- 32.196.67.217
- 35.164.58.22
- 44.227.55.139
- 184.32.25.217
Frequently asked questions
How many IP addresses does AWS have?
Amazon Web Services (AWS) uses 7,941 IPv4 and 3,530 IPv6 address blocks. After merging overlapping ranges, the IPv4 blocks cover about 102 million unique addresses. Counts change as the provider adds, retires or transfers address space.
How can I check if an IP address belongs to AWS?
Enter the address in the IPDebrief IP lookup. If it falls inside one of AWS's ranges, the profile names the provider alongside the announcing network, location and risk signals. AWS ranges are tagged by region and service. An address inside an EC2 range is a customer-controlled virtual machine, so the owner of the traffic is the AWS customer, not Amazon; abuse reports go to AWS, which forwards them to the customer.
Which ASN does AWS use?
Amazon Web Services (AWS) announces its address space from AS16509 and AS14618. An autonomous system number identifies the network that routes the addresses on the internet; each ASN page lists the analysed addresses observed in that network.
Is traffic from AWS IP addresses safe?
Cloud addresses host websites, APIs, mail relays, CI runners and monitoring services, so most traffic from them is automated. That is usually legitimate server-to-server traffic, but because capacity can be rented in minutes, cloud ranges are also a common source of scanning, credential stuffing and scraping. Traffic from a cloud address to a consumer login or checkout page is rarely a person using a browser. Of the 29,246 AWS addresses IPDebrief has analysed, 2,296 (7.9%) currently score as higher risk, so judge each address on its own profile.
Where does this IP range data come from?
Ranges are compiled from address lists the operator publishes and from global routing data, refreshed regularly. Address-level risk comes from independent observations of each address, recomputed in the background.