SmartThings hub v2 keeps uploading data to 54.227.250.141 (Amazon AWS address)

General Discussion
1

My network firewall is reporting that SmartThings keeps uploading data every 4-5 hours to 54.227.250.141 (an Amazon AWS address)

It’s not a lot of data, around 1-3 MB, but I wanted to check if others are seeing this and if this is normal behavior?

My firewall is flagging this as abnormal upload behavior so I just want to know if I should exclude this from the firewall checks. It’s a bit suspicious because there are separate connections to *.smartthings.com using DNS but for some reason this is a direct IP connection to a specific IP address that doesn’t seem to go through DNS.

Looking further at the firewall logs, SmartThings seems to be connecting to this address every 5 minutes.

Screenshot_20231113_230401_Firewalla
Screenshot_20231113_230401_Firewalla1080×2183 176 KB

Screenshot_20231113_230736_Firewalla
Screenshot_20231113_230736_Firewalla1080×1769 145 KB

2

I would exclude it. Most large companies use AWS.

1 Like
3

I wonder if this is the periodic backup that’s now being taken to support the Hub Replace function?

4 Likes
4

I tried blocking 54.227.250.141 which resulted in the SmartThings hub switching to using dc-na01-useast1.connect.smartthings.com for those calls. It turns out that this resolves to the same IP address so mystery solved! These are legit calls but SmartThings is using AWS. The firewall needs to be configured to ignore traffic to that address.

4 Likes