question on netstat (suspicious) results from router.

[Leo Martin Lim]

hi,

I am seeing my router connect to

aeede534cd7c98100.awsglobalaccelerator.com:https

momentarily.... is this a legit connection from router (mine is rt-ax56u) flashed to merlin 388.2.beta1
is this a legit connection?

thanks...

 

[ColinTaylor]

is this a legit connection?

Almost certainly yes.

https://aws.amazon.com/global-accelerator/

 

[Leo Martin Lim]

Almost certainly yes.

https://aws.amazon.com/global-accelerator/

thanks for prompt response...

I thought my router was hacked again, because it restarted at ~1am this morning by itself...
and I have seen this aws accelerator connection from my router before, several weeks ago...
I haven't checked since then, until now....

perhaps, you know what kind of connection the router is doing??? I am curious...

===Martin

 

[L&LD]

@Leo Martin Lim, did you follow the link provided?

 

[RMerlin]

You can check what program is generating the connection:

netstat -tp

I suspect it's related to IFTTT.

 

[Leo Martin Lim]

You can check what program is generating the connection:

netstat -tp

I suspect it's related to IFTTT.

I had rebooted several times, it turn out that the router only opens this conn at boot times and disconnects few seconds later...