Data/CloudIpRanges.json

{
    "metadata": {
        "version": "2.0.0",
        "lastUpdated": "2026-02-27",
        "description": "Cloud provider IP CIDR ranges for compromise detection"
    },
    "providers": {
        "aws": [
            "3.0.0.0/9",
            "13.52.0.0/14",
            "13.56.0.0/14",
            "18.0.0.0/8",
            "23.20.0.0/14",
            "34.192.0.0/10",
            "34.224.0.0/12",
            "34.240.0.0/13",
            "35.153.0.0/16",
            "35.168.0.0/13",
            "44.192.0.0/11",
            "50.16.0.0/15",
            "50.19.0.0/16",
            "52.0.0.0/11",
            "52.44.0.0/15",
            "52.70.0.0/15",
            "52.200.0.0/13",
            "54.80.0.0/12",
            "54.144.0.0/12",
            "54.160.0.0/12",
            "54.196.0.0/14",
            "54.204.0.0/14",
            "54.208.0.0/13",
            "54.224.0.0/12",
            "54.236.0.0/14",
            "107.20.0.0/14",
            "174.129.0.0/16",
            "184.72.0.0/15",
            "184.169.0.0/16"
        ],
        "azure": [
            "13.64.0.0/11",
            "13.104.0.0/14",
            "20.33.0.0/16",
            "20.34.0.0/15",
            "20.36.0.0/14",
            "20.40.0.0/13",
            "20.48.0.0/12",
            "20.64.0.0/10",
            "20.128.0.0/16",
            "20.150.0.0/15",
            "20.160.0.0/12",
            "20.180.0.0/14",
            "20.184.0.0/13",
            "20.192.0.0/10",
            "23.96.0.0/13",
            "40.64.0.0/10",
            "40.112.0.0/13",
            "40.120.0.0/14",
            "40.124.0.0/16",
            "40.126.0.0/18",
            "51.104.0.0/15",
            "51.116.0.0/16",
            "51.120.0.0/16",
            "51.124.0.0/16",
            "51.132.0.0/16",
            "51.136.0.0/15",
            "51.140.0.0/14",
            "52.96.0.0/12",
            "52.112.0.0/14",
            "52.120.0.0/14",
            "52.125.0.0/16",
            "52.132.0.0/14",
            "52.136.0.0/13",
            "52.148.0.0/14",
            "52.152.0.0/13",
            "52.160.0.0/11",
            "52.224.0.0/11",
            "104.40.0.0/13",
            "104.208.0.0/13",
            "137.116.0.0/15",
            "137.135.0.0/16",
            "168.61.0.0/16",
            "168.62.0.0/15"
        ],
        "gcp": [
            "8.34.208.0/20",
            "8.35.192.0/20",
            "23.236.48.0/20",
            "23.251.128.0/19",
            "34.0.0.0/15",
            "34.2.0.0/16",
            "34.3.0.0/23",
            "34.4.0.0/14",
            "34.8.0.0/13",
            "34.16.0.0/12",
            "34.32.0.0/11",
            "34.64.0.0/10",
            "34.128.0.0/10",
            "35.184.0.0/13",
            "35.192.0.0/12",
            "35.208.0.0/12",
            "35.224.0.0/12",
            "35.240.0.0/13",
            "104.196.0.0/14",
            "104.154.0.0/15",
            "107.167.160.0/19",
            "107.178.192.0/18",
            "108.59.80.0/20",
            "108.170.192.0/18",
            "130.211.0.0/16",
            "146.148.0.0/17",
            "162.216.148.0/22",
            "162.222.176.0/21",
            "173.194.0.0/16",
            "173.255.112.0/20",
            "199.36.154.0/23",
            "199.223.232.0/21",
            "209.85.128.0/17"
        ],
        "oracle": [
            "129.146.0.0/16",
            "129.148.0.0/16",
            "129.150.0.0/15",
            "129.152.0.0/16",
            "129.153.0.0/16",
            "129.154.0.0/16",
            "130.35.0.0/16",
            "132.145.0.0/16",
            "134.70.0.0/16",
            "138.1.0.0/16",
            "140.83.0.0/16",
            "140.84.0.0/16",
            "141.144.0.0/16",
            "141.145.0.0/16",
            "141.147.0.0/16",
            "141.148.0.0/16",
            "144.21.0.0/16",
            "144.22.0.0/15",
            "144.24.0.0/14",
            "147.154.0.0/16",
            "150.136.0.0/13",
            "152.67.0.0/16",
            "152.69.0.0/16",
            "152.70.0.0/15",
            "155.248.0.0/16",
            "158.101.0.0/16",
            "168.138.0.0/16",
            "192.29.0.0/16",
            "193.122.0.0/16",
            "193.123.0.0/16"
        ],
        "cloudflare": [
            "103.21.244.0/22",
            "103.22.200.0/22",
            "103.31.4.0/22",
            "104.16.0.0/13",
            "104.24.0.0/14",
            "108.162.192.0/18",
            "131.0.72.0/22",
            "141.101.64.0/18",
            "162.158.0.0/15",
            "172.64.0.0/13",
            "173.245.48.0/20",
            "188.114.96.0/20",
            "190.93.240.0/20",
            "197.234.240.0/22",
            "198.41.128.0/17"
        ],
        "akamai": [
            "2.16.0.0/13",
            "23.0.0.0/12",
            "23.32.0.0/11",
            "23.64.0.0/14",
            "23.192.0.0/11",
            "72.246.0.0/15",
            "95.100.0.0/15",
            "96.6.0.0/15",
            "96.16.0.0/15",
            "104.64.0.0/10",
            "184.24.0.0/13",
            "184.50.0.0/15",
            "184.84.0.0/14"
        ],
        "digitalocean": [
            "104.128.192.0/18",
            "104.131.0.0/16",
            "104.236.0.0/16",
            "138.197.0.0/16",
            "159.65.0.0/16",
            "159.89.0.0/16",
            "167.71.0.0/16",
            "167.172.0.0/16"
        ],
        "vultr": [
            "45.32.0.0/16",
            "45.63.0.0/16",
            "64.156.0.0/16",
            "104.238.128.0/17",
            "108.61.0.0/16",
            "149.28.0.0/16",
            "155.138.0.0/16",
            "207.148.0.0/16"
        ],
        "linode": [
            "45.33.0.0/16",
            "45.56.0.0/16",
            "45.79.0.0/16",
            "50.116.0.0/16",
            "66.175.208.0/20",
            "69.164.192.0/18",
            "96.126.96.0/19",
            "172.104.0.0/15",
            "173.230.128.0/17",
            "173.255.192.0/18",
            "198.58.96.0/19"
        ],
        "ovh": [
            "51.68.0.0/16",
            "51.75.0.0/16",
            "51.77.0.0/16",
            "51.79.0.0/16",
            "51.81.0.0/16",
            "51.83.0.0/16",
            "51.89.0.0/16",
            "51.91.0.0/16",
            "51.178.0.0/16",
            "54.36.0.0/16",
            "54.37.0.0/16",
            "54.38.0.0/16",
            "54.39.0.0/16"
        ],
        "hetzner": [
            "49.12.0.0/16",
            "65.21.0.0/16",
            "95.216.0.0/16",
            "116.202.0.0/16",
            "135.181.0.0/16",
            "142.132.0.0/16",
            "157.90.0.0/16",
            "162.55.0.0/16",
            "167.235.0.0/16",
            "168.119.0.0/16"
        ],
        "afrihost": [
            "167.73.0.0/16",
            "196.251.236.0/24",
            "105.246.0.0/16"
        ]
    }
}