wdes/security
1
0
Fork 0
Code Actions Packages Releases Activity

New CloudFront IPs

Browse Source
This commit is contained in:
William Desportes
2025-04-05 14:36:05 +02:00
parent 3e7e4dd1b5
commit 108b830c5c
2 changed files with 52 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
data/collections/amazon/cloudfront-ips.txt
View File

@ -6,23 +6,40 @@
3.29.57.0/26
3.35.130.128/25
3.101.158.0/23
3.107.43.128/25
3.107.44.0/25
3.107.44.128/25
3.128.93.0/24
3.134.215.0/24
3.146.232.0/22
3.147.164.0/22
3.147.244.0/22
3.160.0.0/14
3.164.0.0/18
3.164.64.0/18
3.164.128.0/17
3.165.0.0/16
3.166.0.0/15
3.168.0.0/14
3.172.0.0/18
3.172.64.0/18
3.173.0.0/17
3.173.128.0/18
3.173.192.0/18
3.174.0.0/15
3.231.2.0/25
3.234.232.224/27
3.236.48.0/23
3.236.169.192/26
13.32.0.0/15
13.35.0.0/16
13.48.32.0/24
13.54.63.128/26
13.59.250.0/26
13.113.196.64/26
13.113.203.0/24
13.124.199.0/24
13.134.24.0/23
13.203.133.0/26
13.210.67.128/26
13.224.0.0/14
13.228.69.0/24
@ -38,10 +55,18 @@
18.160.0.0/15
18.164.0.0/15
18.172.0.0/15
18.175.65.0/24
18.175.66.0/24
18.175.67.0/24
18.192.142.0/23
18.199.68.0/22
18.199.72.0/22
18.199.76.0/22
18.200.212.0/23
18.216.170.128/25
18.229.220.192/26
18.230.229.0/24
18.230.230.0/25
18.238.0.0/15
18.244.0.0/15
34.195.252.0/24
@ -49,6 +74,9 @@
34.223.12.224/27
34.223.80.192/26
34.226.14.0/24
35.93.168.0/23
35.93.170.0/23
35.93.172.0/23
35.158.136.0/24
35.162.63.192/26
35.167.191.128/26
@ -58,9 +86,18 @@
43.218.56.128/26
43.218.56.192/26
43.218.71.0/26
44.220.194.0/23
44.220.196.0/23
44.220.198.0/23
44.220.200.0/23
44.220.202.0/23
44.222.66.0/24
44.227.178.0/24
44.234.90.252/30
44.234.108.128/25
47.129.82.0/24
47.129.83.0/24
47.129.84.0/24
52.15.127.128/26
52.46.0.0/18
52.47.139.0/24
@ -87,6 +124,9 @@
54.239.128.0/18
54.239.192.0/19
54.240.128.0/18
56.125.46.0/24
56.125.47.0/32
56.125.48.0/24
58.254.138.0/25
58.254.138.128/26
64.252.64.0/18
@ -135,7 +175,9 @@
204.246.173.0/24
204.246.174.0/23
204.246.176.0/20
205.251.200.0/21
205.251.202.0/23
205.251.204.0/23
205.251.206.0/23
205.251.208.0/20
205.251.249.0/24
205.251.250.0/23
@ -150,6 +192,7 @@
2600:9000:2000::/36
2600:9000:3000::/36
2600:9000:4000::/36
2600:9000:5200::/40
2600:9000:5308::/45
2600:9000:5310::/44
2600:9000:5320::/43

10
scripts/make-aws-cloudfront-range.sh
View File

@ -1,10 +1,14 @@
#!/bin/sh
PROJECT_ROOT="$(realpath $(dirname $0)/../)"
echo "Running in: $PROJECT_ROOT"
set -eu
# See: https://stackoverflow.com/a/69768584/5155484
curl -f -s -# https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.prefixes[] | select(.service == "CLOUDFRONT") | .ip_prefix' | sort -V > cloudfront-ips.txt
curl -f -s -# https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.ipv6_prefixes[] | select(.service == "CLOUDFRONT") | .ipv6_prefix' | sort -V >> cloudfront-ips.txt
curl -f -s -# https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.prefixes[] | select(.service == "CLOUDFRONT") | .ip_prefix' | sort -V > "$PROJECT_ROOT/data/collections/amazon/cloudfront-ips.txt"
curl -f -s -# https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.ipv6_prefixes[] | select(.service == "CLOUDFRONT") | .ipv6_prefix' | sort -V >> "$PROJECT_ROOT/data/collections/amazon/cloudfront-ips.txt"
# Does not seem up to date: 06-2023
#curl https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips | jq -r '.CLOUDFRONT_GLOBAL_IP_LIST | join("\n")' | sort > cloudfront-ips.txt
#curl https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips | jq -r '.CLOUDFRONT_GLOBAL_IP_LIST | join("\n")' | sort > "$PROJECT_ROOT/data/collections/amazon/cloudfront-ips.txt"