About IP to AWS Service

IP to AWS Service tells you whether an IP address, range or hostname is in AWS's published IP ranges, which AWS service and region it maps to, and, just as important, what that does and doesn't mean.

Who built it

It is built and maintained by Aron Bodogai as an independent project. It is free to use, shows no ads and has no business model.

Why it exists

Plenty of tools already answer the raw question. Paste an address and they'll tell you it is in 3.16.0.0/14, tagged EC2, in us-east-2. What they leave to you is what that means, and that is where people go wrong:

• EC2 gets read as "an EC2 instance", when load balancers, NAT gateways, Lambda and AWS's own services use the same address space.
• AMAZON gets shown as if it named a service, when it means AWS isn't saying.
• "Not in AWS's list" gets read as "not AWS", when customers' own ranges and whole services are left out of the list by design.
• A match gets read as a clue to who is behind an address, when AWS's data never identifies the customer.

This site is an attempt at the clearest and most honest answer to "which AWS service is this IP?", including the frequent honest answer, which is "AWS, in this region, but the data doesn't say which service".

What's different

• Plain-language answers. Every service code is explained, including the direction of traffic and what it means if the address is contacting you. See the service codes reference.
• Every matching range, not just one. AWS's ranges nest and overlap. The page shows all of them, states the rule it used to pick the headline, and flags the confusing cases: unnamed ranges carved out of EC2 space, and regional ranges inside GLOBAL ones.
• Hostnames too. Enter a hostname and the page resolves it, shows the chain of aliases, and checks every address it gets back.
• Honest "not listed" answers. An address outside AWS's list is never called "not AWS". An optional check shows whether an Amazon network announces it anyway.
• The data date on every answer. You can see how current AWS's data is.
• No trackers. No cookies, analytics or ads. Lookups run in your browser, and the optional online checks say who they contact before they run. The privacy page has the details.

How it works explains the data flow, the rules and the blind spots.

Open source

The code is public at github.com/aronbodogai/iptoawsservice. It is plain HTML, CSS and JavaScript with no third-party libraries, so anyone can check what it does with an address.

Report a problem

If an answer looks wrong or misleading, or something doesn't work, please open an issue on GitHub. It helps to include:

• the address or hostname you looked up (issues are public, so leave out anything private);
• what the page said, and what you expected;
• the AWS data date shown under the result;
• your browser, if the page didn't work at all.

A service code or region shown without a description usually means AWS has added something new; an issue about it is welcome. If AWS's data won't download at all, check whether your network or a browser extension blocks ip-ranges.amazonaws.com.

This site can't act on abuse coming from AWS addresses. To report abuse, contact AWS directly: how to report abuse from an AWS IP address.

Not affiliated with AWS

IP to AWS Service is not affiliated with, endorsed by or sponsored by Amazon Web Services. It uses the IP range data AWS publishes for everyone, as published. AWS and related marks are trademarks of Amazon.com, Inc. or its affiliates.