That's what we did. Got him on the phone & blocked the traffic. His
security system went nuts. Wonder what's so important to need to send
that quantity of data for a security system?
bp
<part15sbs{at}gmail{dot}com>
On 4/13/2015 12:35 PM, Ken Hohhof wrote:
Amazon is one of the 2 or 3 biggest rent-a-cloud places, so it could
be anything, not something you would associate with Amazon.
Only way is to check the traffic from the LAN side of his
router/firewall and see what local device it is coming from. Or like
someone said, block it and see what breaks.
*From:* Sterling Jacobson <mailto:[email protected]>
*Sent:* Monday, April 13, 2015 2:23 PM
*To:* [email protected] <mailto:[email protected]>
*Subject:* Re: [AFMUG] Amazon EC2
I have several Kindles.
I’m not sure, but I think there are settings on those that back up to
the ‘cloud’ the pictures and video on the devices.
Lots of phones do the same thing, they just assume Wifi connection is
‘free’ and do their ‘thing’.
*From:*Af [mailto:[email protected]] *On Behalf Of *Bill Prince
*Sent:* Monday, April 13, 2015 12:51 PM
*To:* [email protected]
*Subject:* Re: [AFMUG] Amazon EC2
This is around 2.3 TB at this point.
bp
<part15sbs{at}gmail{dot}com>
On 4/13/2015 11:49 AM, Glen Waldrop wrote:
Could be like one of my customers. They had a online backup set to
run every 24 hours. Well over 200GB of pictures.
It never stopped.
----- Original Message -----
*From:*Bill Prince <mailto:[email protected]>
*To:*[email protected] <mailto:[email protected]>
*Sent:*Monday, April 13, 2015 1:10 PM
*Subject:*Re: [AFMUG] Amazon EC2
I did a reverse name lookup, and they are all in the amazon cloud:
54.208.254.185 name =
ec2-54-208-254-185.compute-1.amazonaws.com
54.174.193.49 name =
ec2-54-174-193-49.compute-1.amazonaws.com
54.173.255.111 name =
ec2-54-173-255-111.compute-1.amazonaws.com
bp
<part15sbs{at}gmail{dot}com>
On 4/13/2015 10:37 AM, Ken Hohhof wrote:
What port numbers?
I have seen this with an infected router. The traffic was
in and back out to Amazon cloud, as if it had been taken
over for a proxy or something.
Something else to look for is some Costco type security
camera system with a cloud DVR.
-----Original Message----- From: Bill Prince
Sent: Monday, April 13, 2015 12:22 PM
To: Motorola III
Subject: [AFMUG] Amazon EC2
I was trouble shooting a problem on a connection this
morning, and found
that the client had three streams running to EC2 in the
Amazon AWS
cloud. It has been running for months, at a more-or-less
constant
upstream rate of about 300 Kbps per stream (all three
streams together
are less than 1 Mbps, but they are all constant, running
24x7 for at
least the last 8 months).
Is this a hijack of some sort? This particular customer is
not
sophisticated, and I can not imagine what sort of compute
resource he
might require. He barely knows how to boot up his computer.
