connection ec2-52-1-170-233.compute-.amazonaws.com or similar

seven7up

Someone knows what this is and why it sends information packets, from and to my computer.
I discovered it in the program resource monitor of Windows 10 the network activity, process Vivaldi.exe also exists another mad06s.25-in-f10.1e100.net
But it strikes me that the first has amazon in the middle. There are many more.
From what I have read are companies that lend their local servers to put information and get faster to the user.
But we are talking about commerce and that they collect they connect and disconnect without the user's permission. they collect data because they transfer it from one side to the other.
Content Delivery Network this is the cause that does not occupy band in our connections, every time we visit a page that has this service they connect with these servers that offer them advertising accommodation and this is injected in that page that you are visiting. (more or less is like this)
So far it does not bother me but it is that they are also injecting into work programs that have nothing to do with advertising by lowering the performance of the network.
A classic example could be a CAD with which you connect to other computers to change information. In addition to your data that comes and goes you will see that network traffic duplicates the communication of these servers.
These servers allegedly injected by third-party cookies, but in my case I have this option disabled in my search engine, however they continue to inject and steal band.
The question goes to the VIVALDI developers:
I do not know if I explained myself well but: Can something be done against this?
Example, now I have only this Web Page
https://forum.vivaldi.net/category/59/report-a-forum-issue

In addition to this connection there are:
compute-1-amazonaws? p = / topic / 38173 / ec2-52-1-170-233-
and I have more than 25 third-party connections.

Companies that can inject or do this service:
Akamai
CloudFlare
Rackspace
Amazon CloudFront
Edgecast
Microsoft Azure
KeyCDN
Limelight
MirrorBrain
OSSCDN
CoralCDN
Of course Google also

Which makes me wonder if VIVALDI has hired this service?

modedit Moved

LonM

@seven7up hi, do you have any extensions installed? Sometimes these can contact resources without asking.

seven7up

Yes, I have a blocker presidentially to avoid some of them.
But I tell you. I format the hard drive install windows 10 again thinking it was a virus, install vivaldi again and there they were again. and without having installed add-ons

seven7up

I propose to other users. Look, if they also have incontinent amounts of connections

mib2berlin

@seven7up
Hi, some default settings in "Privacy" can may connect to the services of https://www.markmonitor.com/ a company in Seattle.
Check to disable them.

Cheers, mib

iAN CooG

@mib2berlin said in connection ec2-52-1-170-233.compute-.amazonaws.com or similar:

@seven7up
Hi, some default settings in "Privacy" can may connect to the services of https://www.markmonitor.com/ a company in Seattle.
Check to disable them.

Cheers, mib

Wait, wait, what? do you mean that "some" (which?) settings in Vivaldi can contact an unwanted server that has nothing to do with Vivaldi?

mib2berlin

@iAN-CooG
Hi.
Google phishing
Google DNS
Google auto fill forms

iAN CooG

@mib2berlin and that markmonitor.com you mentioned before what has to do with google services?

mib2berlin

@iAN-CooG
I am only guessing Google because this company provides anti phishing/malware services and if we can trust there information they work for 9 of 10 most traffic websites.
If I may repeat again, I guess that only.
The owner of amazonaws.com is markmonitor.

Cheers, mib

Nirose

test again with --disable-extensions. I have seen similar connections to google and even android domains with all the google services disabled.

One of the dev explained in old thread that it's connecting for cert verification but i'm not convinced google code are cleaned.

The screenshot is from a packet analysis for Vivaldi with extensions disabled and google phishing, DNS, and form filling all disabled.
It still connects to:
android.l.google.com
update.google.com
accounts.google.com (not on screenshot)

alt text

I've already submitted a bugreport with a video on this. so let's see

Nirose

The owner of amazonaws.com is markmonitor.

AmazonAWS is a cloud service provider, markmonitor is using Amazon's CDN

mib2berlin

@Nirose
Hi again, maybe I misinterpreted the Whois entry?
It is clear AWS systems are Amazon, hm.

[server: whois.verisign-grs.com]
   Domain Name: AMAZONAWS.COM
   Registry Domain ID: 197784869_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.markmonitor.com
   Registrar URL: http://www.markmonitor.com
   Updated Date: 2019-05-07T20:21:36Z
   Creation Date: 2005-08-18T02:10:45Z
   Registry Expiry Date: 2024-01-16T04:59:59Z
   Registrar: MarkMonitor Inc.
   Registrar IANA ID: 292
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.2083895740
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
   Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
   Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
   Name Server: R1.AMAZONAWS.COM
   Name Server: R2.AMAZONAWS.COM
   Name Server: U1.AMAZONAWS.COM
   Name Server: U2.AMAZONAWS.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2019-07-30T03:50:45Z <<<

Cheers, mib

QuHno

@Nirose said in connection ec2-52-1-170-233.compute-.amazonaws.com or similar:

I've already submitted a bugreport with a video on this. so let's see

There are informations about exactly those servers from the screenshot here in the forums.

e.g. the subdomain android1 is used by Google not only for android, but for delivery of updates to all Chromium based browsers, like Chrome, Vivaldi, Chromium Edge, Opera and a gazilion other products that are not browsers but can connect to the web, like e.g. the Adobe CC products (which are now Chromium based too - in the past they were Opera Presto based)

For example Vivaldi connects to the Google owned network to update some components. Those connections ask only for a new versions of the files. You can see which files if you type vivaldi://components into the address bar. If there are new versions, the updates get downloaded. Nothing else.
(Just because there is a subdomain called android1 doesn't mean you are really connected with it or that this is the place where the data really is - it is one of their load balancers for the internal server network, because a single server could not handle all the traffic, so they use whichever server reacts fastest. The IP would be better in this case than the human readable name)
Some other connections are made for the purpose of phishing and malware protection or to resolve DNS errors, but you can disable those in the Settings > Security if you use other means of protection.
Some are made for Address Auto-Complete, but you can disable that too in
Settings > Address Bar or Settings > Search: Allow Search Suggestions

The other connections in the initial post of this thread are all connections to CDNs (Content Delivering Networks) - for which the customers pay to deliver their content and to protect their servers from malware or DDoS attacks. They are opened because you browse websites and that that are no part of Vivaldi with one exception:

Cloudflare is also used to deliver stuff from this forum (If you take a closer look what happens, you will see no advertising, no tracking in those connections). They can't read the traffic because the intermediate keys only help them to find the pages that are cached on their servers while keeping the encryption intact (simply speaking - it is a hell of a lot more complicated).

Those sites that are listed in the initial post deliver 90% of all normal high traffic sites in the web because they all are CDNs. The connection to those are initiated by the user (with a few exceptions, see above)

Short introduction of what a Content Delivery Network is: https://en.wikipedia.org/wiki/Content_delivery_network
In the past years they have become vital for the web as we know it.

Nirose

@mib2berlin it seems markmonitor is a domain registrar for amazon.com, not the owner? sorry