
## Table of Contents

1. [Introduction](#introduction)
2. [How to Block Traffic from a Specific IP Address](#how-to-block-traffic-from-a-specific-ip-address)
3. [Find the Network ACL from EC2](#find-the-network-acl-from-ec2)
4. [Find the IP Address](#find-the-ip-address)
5. [Create a New Rule to Block Traffic](#create-a-new-rule-to-block-traffic)
6. [Conclusion](#conclusion)

## Introduction

This blog shows a few ways to use AWS Network ACLs to block traffic to your
site.

## How to Block Traffic from a Specific IP Address

AWS has a few ways to block specific targets from accessing your site — for example,
Network ACL or WAF. Let's assume the following scenario: you have a website
running on an EC2 instance as a web server, and there's one IP address you
noticed that you want to block. You can use the Network ACL as
follows.

### Find the Network ACL from EC2

First, you need to find the Network ACL from your EC2 instance. You can click
**Subnet** from EC2, then click **Network ACL**.

### Find the IP Address

Next, you need to have an IP address. If you want to test with your own machine's
IPv4 address, you can either Google
**what's my IP address** or go to
https://whatismyipaddress.com/
to check your public IP address.

### Create a New Rule to Block Traffic

Create a new inbound rule as follows:

- Rule#: a number smaller than the allow traffic rule.

- Type: ALL Traffic

- Protocol: ALL

- Port Range: ALL

- Source: {Your IP address}/32

- Allow/Deny: Deny

![](http://res.cloudinary.com/dmwrakaup/image/upload/c_fit,h_600,q_80,w_900/ydnzxu0ey3zlnfzabuld)

## Conclusion

Now you should be able to block a specific IP address from accessing your EC2 instance using AWS Network ACLs. This is a quick and effective way to deny unwanted traffic at the network level.


This blog shows a few ways to use AWS Network ACLs to block traffic to your site.

NetworkACL

Blocking Traffic from Specific IP Address with AWS Network ACL