# Nginx Block Directives for Подсети облака Amazon AWS / EC2 (AS16509)
# Source: https://antibotcore.com/bots/networks/aws-ec2
# Option 1: Direct block inside server { ... } or location / { ... } block:

deny 3.80.0.0/12;
deny 3.96.0.0/13;
deny 18.184.0.0/13;
deny 18.192.0.0/12;
deny 18.204.0.0/14;
deny 18.216.0.0/13;
deny 34.192.0.0/12;
deny 34.208.0.0/12;
deny 34.224.0.0/12;
deny 35.156.0.0/14;
deny 35.160.0.0/13;
deny 35.176.0.0/13;
deny 52.0.0.0/11;
deny 52.32.0.0/11;
deny 52.64.0.0/11;
deny 54.64.0.0/11;
deny 54.96.0.0/11;
deny 54.144.0.0/12;
deny 54.160.0.0/11;
deny 54.192.0.0/11;
deny 54.224.0.0/11;
deny 2600:1f00::/24;

# Option 2: Geo mapping in http { ... } context:
geo $is_bad_aws_ec2 {
    default 0;
    3.80.0.0/12 1;
    3.96.0.0/13 1;
    18.184.0.0/13 1;
    18.192.0.0/12 1;
    18.204.0.0/14 1;
    18.216.0.0/13 1;
    34.192.0.0/12 1;
    34.208.0.0/12 1;
    34.224.0.0/12 1;
    35.156.0.0/14 1;
    35.160.0.0/13 1;
    35.176.0.0/13 1;
    52.0.0.0/11 1;
    52.32.0.0/11 1;
    52.64.0.0/11 1;
    54.64.0.0/11 1;
    54.96.0.0/11 1;
    54.144.0.0/12 1;
    54.160.0.0/11 1;
    54.192.0.0/11 1;
    54.224.0.0/11 1;
    2600:1f00::/24 1;
}