General Discussion
  >> tbbMeter Issues


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | (show all)   Print Thread
Standard User Tantalus
(regular) Sun 21-Feb-16 09:55:09
Print Post

tbbMeter Integration


[link to this post]
 
This post covers a number of issues some of which are related to tbbMeter. I am on BT infinity.

1) I experienced a dramatic slowdown in broadbandspeed. I did the normal test which shows it was <1MBs (normally ~30MBs). However this and subsequent tests did not link to my profile which seem to end on 8/9/15 even though I have done many tests after this.

2) I then went to BT check line status and this was OK.
http://www.homeandwork.openreach.co.uk/problems-with...

3) I then went to BT speed checker which said the speed was too slow to test:
http://diagnostics.bt.com/login/?workflow=Speed

4) I switched everyting off for 5mins then rebooted the router and computer and this cleared the problem.

5) I downloaded tbbMeter incase of future incidents. I found the calibration did not work and when I tried to register it said my user id already existed so the statistics can not be linked to my profile.

6) tbbMeter did report (internet sites visted) that amazon (compute.amazonaws.com) and facebook.com were continually monitoring my computer which I find annoying as I use neither. Short of defining deny in htaccess which would degrade performance I can not think of an answer to this intrusion of privacy.
Standard User RobertoS
(elder) Sun 21-Feb-16 10:25:21
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
Sorry I can't help with your post, but your Point 6 alarmed me. Are you saying tbbMeter is monitoring and to some extent recording our internet activity. That's if we have it installed, but possibly not using?

Or did you mean those sites are visiting, i.e. crawling? I'm a bit puzzled as to how they are "monitoring" your computer.

Edit re Point 5. I assume you haven't forgotten that the registering tbbMeter is by setting up a username on the Main Site? It can be the same as your forum one if you wish.

The indispensable man or woman passes from the scene, and what happens next is more or less the same thing as was happening before.
My broadband basic info/help site - www.robertos.me.uk. Domains, site and mail hosting - Tsohost.
Connection - AAISP Home::1 80/20. Sync 59504/15641kbps @ 600m. - BQM

Edited by RobertoS (Sun 21-Feb-16 10:29:15)

Administrator MrSaffron
(staff) Sun 21-Feb-16 10:25:55
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
1. The profile linking of tests is down to the use of our non-flash test, once some other site changes have taken place the tests will once more link with your profile

6) amazonaws may just be generic cloud based services, it is possible to figure out which processes are actually using the data which will give you a clue, e.g. it might be cloud back up. On Facebook.com unless you have some widget/app download and no pages open that use any facebook components then no reason a PC should be continually accessing facebook.

Even if there is other activity on the PC in terms of internet access the speed tests should swamp that unless the alternate activity is very high.

Have you looked at the connection statistics in the Home Hub, it sounds very like a low speed connection resulted due to some noise or other event, and rebooting the home hub after the event gave you back your normal speed, i.e. with DSL based connections if things are slow the classic restart everything is a valid way of getting speed back.

The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.


Register (or login) on our website and you will not see this ad.

Standard User Tantalus
(regular) Tue 23-Feb-16 18:45:10
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
Roberto and Andrew

Many thanks for your replies.

Roberto, I am registered both for the forum and thinkbroadband with the same user name. When I tried to link in tbbMeter statistics to my user name it said that user name was already in use.

To more important matters.... I have established both are and a friend are being constanly monitored by Amazon. Without tbbMeter we would never have known this! So many thanks tbbmeter!

These are the details in excel xls format copied and pasted:


IP Address Host Name Ports First Seen Last Seen Down(KB) Up (KB)
54.173.221.102 ec2-54-173-221-102.compute-1.amazonaws.com 443 23/02/2016 08:24 23/02/2016 15:14 1 2
52.73.236.192 ec2-52-73-236-192.compute-1.amazonaws.com 443 23/02/2016 14:44 23/02/2016 14:44 0 1
52.72.183.180 ec2-52-72-183-180.compute-1.amazonaws.com 443 23/02/2016 07:59 23/02/2016 13:44 1 2
52.71.121.157 ec2-52-71-121-157.compute-1.amazonaws.com 443 23/02/2016 12:24 23/02/2016 13:19 1 2
52.20.245.150 ec2-52-20-245-150.compute-1.amazonaws.com 443 23/02/2016 05:04 23/02/2016 12:59 1 2
54.152.225.202 ec2-54-152-225-202.compute-1.amazonaws.com 443 23/02/2016 08:59 23/02/2016 11:24 1 2
184.72.240.238 ec2-184-72-240-238.compute-1.amazonaws.com 80 23/02/2016 07:14 23/02/2016 11:14 6 6
52.32.59.229 ec2-52-32-59-229.us-west-2.compute.amazonaws.com 443 23/02/2016 05:14 23/02/2016 10:29 1 0
52.5.232.33 ec2-52-5-232-33.compute-1.amazonaws.com 443 23/02/2016 10:24 23/02/2016 10:24 0 0
54.174.179.70 ec2-54-174-179-70.compute-1.amazonaws.com 443 23/02/2016 10:04 23/02/2016 10:04 0 1
54.165.14.197 ec2-54-165-14-197.compute-1.amazonaws.com 443 23/02/2016 09:24 23/02/2016 09:25 0 1
52.34.69.143 ec2-52-34-69-143.us-west-2.compute.amazonaws.com 443 23/02/2016 08:31 23/02/2016 08:32 1 0
52.88.112.239 ec2-52-88-112-239.us-west-2.compute.amazonaws.com 443 23/02/2016 08:31 23/02/2016 08:32 1 1
54.194.162.177 ec2-54-194-162-177.eu-west-1.compute.amazonaws.com 80 23/02/2016 08:31 23/02/2016 08:31 43 1
52.27.10.252 ec2-52-27-10-252.us-west-2.compute.amazonaws.com 443 23/02/2016 08:27 23/02/2016 08:28 0 0
176.34.122.196 ec2-176-34-122-196.eu-west-1.compute.amazonaws.com 443 23/02/2016 05:15 23/02/2016 07:30 396 50
52.72.232.16 ec2-52-72-232-16.compute-1.amazonaws.com 443 23/02/2016 07:24 23/02/2016 07:24 0 1
52.88.155.162 ec2-52-88-155-162.us-west-2.compute.amazonaws.com 443 23/02/2016 07:11 23/02/2016 07:12 0 0
52.71.137.67 ec2-52-71-137-67.compute-1.amazonaws.com 443 23/02/2016 06:54 23/02/2016 06:54 0 1
52.0.46.15 ec2-52-0-46-15.compute-1.amazonaws.com 443 23/02/2016 06:24 23/02/2016 06:24 0 1
52.21.197.186 ec2-52-21-197-186.compute-1.amazonaws.com 443 23/02/2016 05:54 23/02/2016 05:54 0 1
52.70.20.16 ec2-52-70-20-16.compute-1.amazonaws.com 443 23/02/2016 05:24 23/02/2016 05:24 0 0
52.30.56.38 ec2-52-30-56-38.eu-west-1.compute.amazonaws.com 443 23/02/2016 05:15 23/02/2016 05:17 2 5
52.30.193.137 ec2-52-30-193-137.eu-west-1.compute.amazonaws.com 443 23/02/2016 05:17 23/02/2016 05:17 1 0
52.88.174.121 ec2-52-88-174-121.us-west-2.compute.amazonaws.com 443 23/02/2016 05:16 23/02/2016 05:17 5 0
176.34.103.181 ec2-176-34-103-181.eu-west-1.compute.amazonaws.com 443 23/02/2016 05:15 23/02/2016 05:16 2 1
176.34.107.218 ec2-176-34-107-218.eu-west-1.compute.amazonaws.com 443 23/02/2016 05:15 23/02/2016 05:15 2 1
54.204.12.158 ec2-54-204-12-158.compute-1.amazonaws.com 443 23/02/2016 05:15 23/02/2016 05:15 1 0
52.22.204.30 ec2-52-22-204-30.compute-1.amazonaws.com 443 23/02/2016 04:24 23/02/2016 04:24 0 4
Administrator MrSaffron
(staff) Tue 23-Feb-16 19:14:27
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
May not be Amazon at all, but looks more like someone who is using Amazon cloud services i.e. a very common thing for cloud based services.

The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User Tantalus
(regular) Thu 25-Feb-16 11:25:19
Print Post

Re: tbbMeter Integration


[re: MrSaffron] [link to this post]
 
Found this out from Google:

Amazonaws = Amazon web services

This is a new service by Amazon (trying to do a bit of a Google).

They are renting out space and bandwidth on their servers to developers. Those developers then use the services supplied by Amazon to scan other people's websites - it's not Amazon themselves who are doing it. If your websites' bandwidth is being racked up by amazonaws then you can complain to amazonaws with details of when and what happened and they'll "warn" the person doing it, and then cut them off if they keep doing it (or so they imply).

The only good point about this is that the person using their service has to pay them by the hour and by the Gigabyte, so if they rack up your bandwidth they rack up their own bill. The bad point is that they don't charge a lot for this service.

As it's not a search engine you can quite safely bar amazonaws ip addresses - but be aware that they have a massive traunch of ip addresses at their disposal (the whole amazon network), so it won't be that easy.

But you don't have to ban by ip address and can ban by domain, so you can just simply ban amazonaws.com via a root level .htaccess file - using the same code as for an ip address ban but using the domain name instead e.g. *.amazonaws.com

There is no valid reason that I can see why amazonaws.com should be on people's websites at all - so ban away!
Administrator MrSaffron
(staff) Thu 25-Feb-16 13:56:29
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
Be interesting to find out what does stop working for you if anything

The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User Tantalus
(regular) Thu 25-Feb-16 14:57:07
Print Post

Re: tbbMeter Integration


[re: MrSaffron] [link to this post]
 
Thankyou for replying Andrew.

I've read up on htaccess and it applies to websites on servers rather than home PC's, so I don't think I can use that technique to stop Amazonaws. Google shows it is a widespread annoyance.

I installed tbbMeter on our other PC which is running Windows 10 to see if Amazonaws was accessing that computer.

I downloaded: Current version: v0.9.8.4 Released: 15/02/2011, then updated it to the latest version.

The installation went ahead without any problems. The test file was processed correctly

However. it did not detect any downloading or uploading.

For example, I updated Norton which downloaded it's latest updates but this was not detected by tbbMeter.

I left the PC for two hours and it still said: "Today: down 0MB up 0MB".

Paul
Standard User Tantalus
(regular) Fri 26-Feb-16 08:47:58
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
The way to block sites from getting to your computer is via Windows host file. However this does not accept wild cards. I installed Acrylic which is a proxy DNS server and this did. However, it did not block the unwanted web sites as they were retrieved from cache (see log - there are no Bs). This is as far as I've got.

There are many more websites tracking my computer than I at first thought. Just bringing up the browser (firefox/IE) cause Amazonaws tracking to begin.

My feeling is that the Internet is not no longer fit for pupose (if it ever was) and the public should be made more aware of the extent of external access should be publicised.

Paul

Here is some information on what I've done....

Acrylic Hosts file
127.0.0.1 localhost localhost.localdomain
::1 localhost localhost.localdomain

127.0.0.1 twitter.com
127.0.0.1 instagram.com
127.0.0.1 myspace.com


# Block Amazonaws IPv4
127.0.0.1 *.*.compute.amazonaws.com
127.0.0.1 *.amazonaws.com

# Block Akamaitechnologies
127.0.0.1 *.deploy.static.akamaitechnologies.com


# Block Facebook IPv4
127.0.0.1 static.ak.fbcdn.net
127.0.0.1 www.static.ak.fbcdn.net
127.0.0.1 login.facebook.com
127.0.0.1 www.login.facebook.com
127.0.0.1 fbcdn.net
127.0.0.1 www.fbcdn.net
127.0.0.1 fbcdn.com
127.0.0.1 www.fbcdn.com
127.0.0.1 static.ak.connect.facebook.com
127.0.0.1 www.static.ak.connect.facebook.com
127.0.0.1 www.fb.facebook.com
127.0.0.1 facebook.com
127.0.0.1 https://fb.facebook.com/
127.0.0.1 https://facebook.com
127.0.0.1 *.facebook.com
127.0.0.1 blog.facebook.com


# Must add to end
127.0.0.1 *.localhost
127.0.0.1 *.local
127.0.0.1 *.lc

Sample of the log:
; In the hit log, along with the packet timestamp, client address and request
; description there's a treatment field code (how Acrylic treated it):
;
; B -> Explicitly blocked
; H -> Resolved from the hosts cache
; C -> Resolved from the address cache
; F -> Forwarded to the configured DNS servers
; R -> Received from one of the configured DNS servers
; U -> Silent update from one of the configured DNS servers

2016-02-26 07:34:48.450 127.0.0.1 H Q[1]=frontend-Diagnost-1SCNCG3BR1RFE-634346662.eu-west-1.elb.amazonaws.com;T[1]=A
2016-02-26 07:34:48.450 127.0.0.1 C Q[1]=frontend-Diagnost-1SCNCG3BR1RFE-634346662.eu-west-1.elb.amazonaws.com;T[1]=AAAA
2

2016-02-26 07:37:17.042 127.0.0.1 C Q[1]=246.96.198.23.in-addr.arpa;T[1]=PTR
2016-02-26 07:37:17.044 127.0.0.1 H Q[1]=a23-198-96-246.deploy.static.akamaitechnologies.com;T[1]=A
2016-02-26 07:37:17.946 127.0.0.1 C Q[1]=38.56.30.52.in-addr.arpa;T[1]=PTR
2016-02-26 07:37:17.948 127.0.0.1 H Q[1]=ec2-52-30-56-38.eu-west-1.compute.amazonaws.com;T[1]=A
2016-02-26 07:37:21.052 127.0.0.1 F Q[1]=67.18.31.185.in-addr.arpa;T[1]=PTR
2016-02-26 07:37:21.072 8.8.4.4 R RC=3;QDC=1;ANC=0;Z=0000818300010000000100000236370231380233310331383507696E2D61646472046172706100000C0001C01500060001000007000030037072690761757468646E730472697065036E65740003646E73C04356CF907300000E1000000258000D2F0000000E10
2016-02-26 07:37:25.132 127.0.0.1 F Q[1]=207.19.31.185.in-addr.arpa;T[1]=PTR
2016-02-26 07:37:25.143 8.8.4.4 R RC=3;QDC=1;ANC=0;Z=000081830001000000010000033230370231390233310331383507696E2D61646472046172706100000C0001C016000600010000052D0030037072690761757468646E730472697065036E65740003646E73C04456CF907300000E1000000258000D2F0000000E10
2016-02-26 07:37:26.146 127.0.0.1 C Q[1]=226.198.58.216.in-addr.arpa;T[1]=PTR
2016-02-26 07:37:26.147 127.0.0.1 C Q[1]=lhr26s04-in-f2.1e100.net;T[1]=A
2016-02-26 07:37:26.884 127.0.0.1 F Q[1]=207.43.235.23.in-addr.arpa;T[1]=PTR
Administrator MrSaffron
(staff) Fri 26-Feb-16 10:09:08
Print Post

Re: tbbMeter Integration


[re: Tantalus] [link to this post]
 
Windows 10 does not have the TCP packet sniffing, it would cost us a chunk of money to be able to offer it, and a good number of hours rewriting the software - alas not enough bodies available to do that (and importantly ones we trust to not leave backdoors etc)

The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Pages in this thread: 1 | 2 | (show all)   Print Thread

Jump to