I need to get the IP numbers that are connecting to the EC2 instance then add them to AWS security group as a security group rule. So only those machines will have the permission to connect to instance. I don't need the port number that they're connecting to instance.

I installed iptraf-ng but app is very slow on the instance. Any other suggestions to capture the connecting IP's to instance so I can add them faster to security group rule?

CodePudding user response：

You can use VPC Flow logs to monitor the traffic to the VPC (which will include the traffic that is going to the EC2 instance).