Reading about AWS EC2 (http://aws.amazon.com/ec2/), I don't get the impression that this is some sort of backup service. It looks like a compute service for lack of a better term.

In any case, you'd think that the customer would know what they've signed up for, but in this case, the only thing the guy has that has any connection to "Amazon" is his Kindle. I don't think he's running his Kindle 24x7, and he has no clue.

bp
<part15sbs{at}gmail{dot}com>

On 4/13/2015 11:54 AM, Glen Waldrop wrote:
I'm not sure what the total was by the time they stopped it. I asked them about the upload, they told me and I told them what was going on and why their Internet was slow.

A 200GB upload @ 1Mbps started every 24 hours never finishes. This system either didn't do incremental or never finished the initial upload to start incremental. It went on for months, then they *finally* took 200GB of personal pics out of their business computer and the upload takes about an hour now.

    ----- Original Message -----
    *From:* Bill Prince <mailto:[email protected]>
    *To:* [email protected] <mailto:[email protected]>
    *Sent:* Monday, April 13, 2015 1:51 PM
    *Subject:* Re: [AFMUG] Amazon EC2

    This is around 2.3 TB at this point.

    bp
    <part15sbs{at}gmail{dot}com>

    On 4/13/2015 11:49 AM, Glen Waldrop wrote:
    Could be like one of my customers. They had a online backup set
    to run every 24 hours. Well over 200GB of pictures.
    It never stopped.

        ----- Original Message -----
        *From:* Bill Prince <mailto:[email protected]>
        *To:* [email protected] <mailto:[email protected]>
        *Sent:* Monday, April 13, 2015 1:10 PM
        *Subject:* Re: [AFMUG] Amazon EC2

        I did a reverse name lookup, and they are all in the amazon
        cloud:

            54.208.254.185           name =
            ec2-54-208-254-185.compute-1.amazonaws.com
            54.174.193.49            name =
            ec2-54-174-193-49.compute-1.amazonaws.com
            54.173.255.111           name =
            ec2-54-173-255-111.compute-1.amazonaws.com


        bp
        <part15sbs{at}gmail{dot}com>

        On 4/13/2015 10:37 AM, Ken Hohhof wrote:
        What port numbers?

        I have seen this with an infected router.  The traffic was
        in and back out to Amazon cloud, as if it had been taken
        over for a proxy or something.

        Something else to look for is some Costco type security
        camera system with a cloud DVR.


        -----Original Message----- From: Bill Prince
        Sent: Monday, April 13, 2015 12:22 PM
        To: Motorola III
        Subject: [AFMUG] Amazon EC2


        I was trouble shooting a problem on a connection this
        morning, and found
        that the client had three streams running to EC2 in the
        Amazon AWS
        cloud. It has been running for months, at a more-or-less
        constant
        upstream rate of about 300 Kbps per stream (all three
        streams together
        are less than 1 Mbps, but they are all constant, running
        24x7 for at
        least the last 8 months).

        Is this a hijack of some sort? This particular customer is not
        sophisticated, and I can not imagine what sort of compute
        resource he
        might require. He barely knows how to boot up his computer.





Reply via email to