Comments (8)
michaelwittig
commented on May 29, 2024
You are right about yum, clam AV OS and clam av db update.
Additionally, the AWS API for the following services are used by the solution:
s3, cloudformation, sqs, sns, cloudwatch logs, iam (if you use iam ssh access)
Besides that, the default processes for Amazon Linux 2 run (this includes things like the ssm agent).
Can you share the IPs that are contacted according to your recordings?
from aws-s3-virusscan.
subhashvz
commented on May 29, 2024
Thanks for your quick response...Here are few Ips which ec2 ig to connect:
222.186.30.12
222.186.301.166
209.51.161.238
222.186.30.248
192.111.144.114
185.153.198.218
from aws-s3-virusscan.
michaelwittig
commented on May 29, 2024
just one quick follow up question: are you sure that the instance connects to those ips? or are those ips trying to connect to your instances?
from aws-s3-virusscan.
michaelwittig
commented on May 29, 2024
any updates on this?
from aws-s3-virusscan.
subhashvz
commented on May 29, 2024
Hi Michael.
Yes, it is outward traffic. instance is trying to connect to those Ip's..
from aws-s3-virusscan.
michaelwittig
commented on May 29, 2024
Can you terminate all S3 VirusScan EC2 instances. The Auto Scaling Group will replace them within minutes and provide us a fresh installation.
from aws-s3-virusscan.
subhashvz
commented on May 29, 2024
We did terminate the instance and again with the fresh install we see the same issue.. EC2 has been trying to connect to the different IPs...
from aws-s3-virusscan.
michaelwittig
commented on May 29, 2024
Is it possible that we schedule a screensharing session for further debugging? If so, feel free to send me an email [email protected]
from aws-s3-virusscan.
Related Issues (20)
- SQS Queues Without Server-Side Encryption HOT 2
- Bug | Ruby S3 get_object logic reversed HOT 1
- SNS topic message to SQS HOT 4
- So can this be turned into a desktop application ? HOT 1
- Failed to execute command : dpkg-query HOT 9
- Some questions to confirm. HOT 1
- EC2 instances should not have a public IP address HOT 1
- Instance Metadata Service Version 2 (IMDSv2) HOT 1
- Time trace for file scanning for vulnerability HOT 1
- Feature: Create a parameter to control key associated with kms:Decrypt action HOT 4
- Feature: Create the S3 event notification forwarding in CloudFormation template HOT 1
- cloudformation userdata fails suddenly HOT 3
- aws-s3-virusscan not processing items from ScanQueue HOT 9
- aws-partitions requires Ruby version >= 2.3 HOT 4
- Is this library affected by the log4j vulnerability? HOT 4
- New issue with missing XML library HOT 5
- Alerts if scanning is not working HOT 3
- ClamAV stopped scanning files HOT 11
- Autoscaling resource creation issue in capetown region. HOT 3
- Support for EventBridge? HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-s3-virusscan.