MySmartCoPilot
Ask Passes Your pass 7 days left 1 day left Last day

Your country

Tools that support it use your country for local currency, number formats, units and paper size. Your choice is saved only in this browser.

Cloud IP Range Lookup

Which cloud or CDN owns an IP address? Check addresses against the official range lists.

Free preview, no sign-upIncluded in your pass Pro ₹179 / $5.99 for 30 days On this device; its files download once
+3 +1 No uploadWorks offline once opened Network

Free preview: the totals in full, with the first rows of each check and the first lines of each list. Locked until you unlock it: download and copy.

Pro pass ₹179 for 30 days or ₹79 for 1 week, one‑time. Pro pass $5.99 for 30 days or $2.99 for 1 week, one‑time. How to unlock

Try before you buy.

  • Free preview: the totals in full, with the first rows of each check and the first lines of each list.
  • Locked until you unlock it: download and copy.
  • Unlock: Pro pass, ₹179 for 30 days or ₹79 for 1 week, a one-time payment that never renews. Unlock: Pro pass, $5.99 for 30 days or $2.99 for 1 week, a one-time payment that never renews.

Ways to unlock shows how to get the full result.

See passes

Printing this result is locked in the free preview.

Addresses to check

Any text: the addresses in it are found for you, up to 1,000 at once. It stays on this device.

The results appear here.

Paste addresses and press Check, or press Try an example.

Next steps Done. What next?

Start over

A Pro pass unlocks the full result. See passes

All network & web tools

About the Cloud IP Range Lookup

Cloud and CDN companies publish the IP ranges they use: AWS by service and region, Microsoft Azure as service tags, Google for its cloud and for its own services, GitHub for webhooks and Actions runners, and others. This tool keeps copies of those official lists and does two things with them.

Check addresses: paste IP addresses, CIDR blocks or whole log lines, and see for each one which provider lists it, in which range, and for which service and region (an Azure address shows its service tags, an AWS one its service and zone). An IPv4 address that a dual-stack server logged as ::ffff:203.0.113.5 is checked as the IPv4 address. Build an allowlist: pick a provider, a service and a region, and get the ranges as a plain list, CSV, JSON, nginx allow or set_real_ip_from lines, Apache Require ip, iptables, nftables sets or ufw rules, with overlapping ranges combined. The free preview shows the totals and the first rows and lines; a pass unlocks the full results, copying and downloads.

How to use it

  1. Choose Check addresses and paste IP addresses, CIDR blocks or log lines (up to 1,000 addresses at once), then press Check.
  2. Read the table: each address with the provider, the listed range that holds it and its service and region, or “Not in a listed range”.
  3. Choose Build an allowlist, pick a provider, a service and a region, and the output format your server or firewall reads.
  4. With a pass, copy the result or download it; the free preview shows the first lines and the totals.

Examples

Google Public DNS
Input
8.8.8.8
Result
Google, range 8.8.8.0/24: Google APIs and services (not a Google Cloud customer address).
An Azure storage address
Input
An address in an Azure Storage range in West Europe
Result
Microsoft Azure: Storage.WestEurope, Storage, AzureCloud.westeurope, AzureCloud.

An Azure range belongs to its regional service tag and to the global one.

Only GitHub webhooks to port 443
Input
Build an allowlist: GitHub, Webhooks (hooks), ufw, port 443
Result
One line for each hooks range: ufw allow proto tcp from <range> to any port 443
A block that is partly listed
Input
192.0.0.0/16
Result
Partly in listed ranges: the block is larger than the provider’s ranges inside it.

Common uses

  • Finding out which cloud a server, crawler or attacker in your logs runs on.
  • Letting only a CDN or a webhook sender reach your origin server or firewall port.
  • Writing nginx set_real_ip_from lines so your logs show visitors, not the CDN.
  • Checking that an allowlist still matches a provider’s current ranges.

Where the ranges come from

Using an allowlist safely

Providers change their ranges often, some every week, so an allowlist made today goes out of date: check it again from time to time. A cloud range holds every customer of that cloud: allowing “all of AWS” or “all of Azure” lets in anyone who rents a server there, so pick the narrowest service and region that does the job. GitHub says its hosted Actions runners get their addresses from shared infrastructure, does not recommend allowing by IP address, and asks those who do to watch its meta API for changes. For a CDN in front of your site, allowing its ranges on your origin only protects you when the CDN is the only way in.

Formats

  • nginx: allow 192.0.2.0/24; lines ending with deny all;, or set_real_ip_from lines for the real-IP module.
  • Apache 2.4: Require ip inside <RequireAny>.
  • iptables / ip6tables: one -A INPUT -s … -j ACCEPT rule per range, with an optional port.
  • nftables: interval sets with auto-merge (set names are at most 16 characters) and example rules.
  • ufw: ufw allow from …, or with a port ufw allow proto tcp from … to any port 443.
  • Plain list, CSV and JSON for scripts and other tools.

Limitations

  • The lists are copies of what the providers publish: a range a provider added after the copy was made is missing until the copy is updated.
  • A provider’s list says what the provider uses, not who the customer is: a cloud address can belong to any of its customers.
  • Up to 1,000 addresses are checked at once; split longer lists.

Privacy

On this device; its files download once

Everything happens in your browser. What you enter or open here is not uploaded or stored by MySmartCoPilot. Downloads MySmartCoPilot’s copies of the providers’ published range lists once (about 240 KB in all); the addresses you check never leave your browser.

Frequently asked questions

What do I get without a pass?

Without a pass, Cloud IP Range Lookup shows the totals in full, with the first rows of each check and the first lines of each list. Until you unlock it, the result can’t be downloaded or copied. A Pro, Premium or Ultimate pass, a one-time payment that never renews, unlocks the full result. The pricing page lists the passes and their prices.

Why does an address show two providers?

Some providers run on others: GitHub Actions runners, for example, use Azure ranges, so a runner’s address is in both lists. Each match names the list it comes from.

Should I combine ranges?

Usually yes: combining joins overlapping and neighbouring ranges into the fewest CIDR blocks that cover exactly the same addresses, so the list is shorter and faster to match. Turn it off to see the ranges exactly as the provider lists them.

Is 8.8.8.8 a Google Cloud server?

No: 8.8.8.8 (Google Public DNS) is in Google’s list of its own services, not in the Google Cloud customer ranges. The check names the list an address is in, so you can tell a provider’s own service from a customer’s server.

Does the tool send my addresses anywhere?

No. The range lists are downloaded from MySmartCoPilot once, and every check runs in your browser.

More network tools

All network & web tools →
What Is My IP Address Your public IP address — IPv4 and IPv6 — and what it tells websites about you.
Abuse Contact Finder Who to tell about spam, phishing or attacks — taken from the registries’ own records.
ASN Lookup Who runs an autonomous system, and every prefix it announces — ready for a firewall. Pro
Port Number Lookup What runs on a port, what IANA says about it, and whether it should face the internet.
Cryptographic IP & MAC Lab Generator Generate complete device-random batches from explicit address domains. Pro
MAC Address Lookup Who made a network device — and whether its MAC address is real, random or multicast.