Sign inMonitor a domain
aws · EC2_INSTANCE_CONNECT

Amazon Web Services uses 74 prefixes for EC2_INSTANCE_CONNECT.

Last updated 5 Nov 2026 from Amazon Web Services’s own list (file dated 2026-11-04-23-10-01)

Short answer

EC2_INSTANCE_CONNECT lists the addresses the EC2 Instance Connect service uses to open SSH sessions to instances.

IPv4 prefixes37
IPv6 prefixes37
Regions in the first 100ap-northeast-2, ap-south-1, ap-southeast-2, af-south-1, eu-north-1, us-west-1, eu-south-1, ap-northeast-3 …
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
13.209.1.56/29ap-northeast-2EC2_INSTANCE_CONNECT
13.233.177.0/29ap-south-1EC2_INSTANCE_CONNECT
13.239.158.0/29ap-southeast-2EC2_INSTANCE_CONNECT
13.244.121.196/30af-south-1EC2_INSTANCE_CONNECT
13.48.4.200/30eu-north-1EC2_INSTANCE_CONNECT
13.52.6.112/29us-west-1EC2_INSTANCE_CONNECT
15.161.135.164/30eu-south-1EC2_INSTANCE_CONNECT
15.168.105.160/29ap-northeast-3EC2_INSTANCE_CONNECT
15.200.28.80/30us-gov-west-1EC2_INSTANCE_CONNECT
16.24.46.56/29me-south-1EC2_INSTANCE_CONNECT
16.50.248.80/29ap-southeast-4EC2_INSTANCE_CONNECT
16.63.77.8/29eu-central-2EC2_INSTANCE_CONNECT
18.101.90.48/29eu-south-2EC2_INSTANCE_CONNECT
18.202.216.48/29eu-west-1EC2_INSTANCE_CONNECT
18.206.107.24/29us-east-1EC2_INSTANCE_CONNECT
18.228.70.32/29sa-east-1EC2_INSTANCE_CONNECT
18.237.140.160/29us-west-2EC2_INSTANCE_CONNECT
18.252.4.0/30us-gov-east-1EC2_INSTANCE_CONNECT
18.60.252.248/29ap-south-2EC2_INSTANCE_CONNECT
3.0.5.32/29ap-southeast-1EC2_INSTANCE_CONNECT
3.103.24.208/29ap-southeast-6EC2_INSTANCE_CONNECT
3.112.23.0/29ap-northeast-1EC2_INSTANCE_CONNECT
3.120.181.40/29eu-central-1EC2_INSTANCE_CONNECT
3.16.146.0/29us-east-2EC2_INSTANCE_CONNECT
3.29.147.40/29me-central-1EC2_INSTANCE_CONNECT
3.8.37.24/29eu-west-2EC2_INSTANCE_CONNECT
35.180.112.80/29eu-west-3EC2_INSTANCE_CONNECT
35.183.92.176/29ca-central-1EC2_INSTANCE_CONNECT
40.176.213.168/29ca-west-1EC2_INSTANCE_CONNECT
43.192.155.8/29cn-northwest-1EC2_INSTANCE_CONNECT
43.196.20.40/29cn-north-1EC2_INSTANCE_CONNECT
43.198.192.104/29ap-east-1EC2_INSTANCE_CONNECT
43.209.155.96/29ap-southeast-7EC2_INSTANCE_CONNECT
43.216.87.48/29ap-southeast-5EC2_INSTANCE_CONNECT
43.218.193.64/29ap-southeast-3EC2_INSTANCE_CONNECT
51.16.183.224/29il-central-1EC2_INSTANCE_CONNECT
78.12.207.8/29mx-central-1EC2_INSTANCE_CONNECT
2400:7fc0:86fd:e00::/56cn-north-1EC2_INSTANCE_CONNECT
2404:c2c0:87aa:4800::/56cn-northwest-1EC2_INSTANCE_CONNECT
2406:da10:84f9:9e00::/56ap-southeast-5EC2_INSTANCE_CONNECT
2406:da11:700:3b00::/56af-south-1EC2_INSTANCE_CONNECT
2406:da12:1e1:d900::/56ap-northeast-2EC2_INSTANCE_CONNECT
2406:da12:80b3:4800::/56ap-southeast-6EC2_INSTANCE_CONNECT
2406:da14:1c18:2100::/56ap-northeast-1EC2_INSTANCE_CONNECT
2406:da14:85c5:5b00::/56ap-southeast-7EC2_INSTANCE_CONNECT
2406:da16:856:a500::/56ap-northeast-3EC2_INSTANCE_CONNECT
2406:da17:1db:b00::/56me-central-1EC2_INSTANCE_CONNECT
2406:da18:752:6600::/56ap-southeast-1EC2_INSTANCE_CONNECT
2406:da19:14b:8c00::/56ap-southeast-3EC2_INSTANCE_CONNECT
2406:da1a:74a:4b00::/56ap-south-1EC2_INSTANCE_CONNECT
Showing 50 of 74 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 13.209.1.56/29;
allow 13.233.177.0/29;
allow 13.239.158.0/29;
allow 13.244.121.196/30;
allow 13.48.4.200/30;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 13.209.1.56/29 -j ACCEPT
iptables -A INPUT -s 13.233.177.0/29 -j ACCEPT
iptables -A INPUT -s 13.239.158.0/29 -j ACCEPT
iptables -A INPUT -s 13.244.121.196/30 -j ACCEPT
iptables -A INPUT -s 13.48.4.200/30 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Amazon Web Services: published IP ranges · checked 5 Nov 2026
  2. Amazon Web Services documentation