How do I troubleshoot stopped traffic when the network configuration hasn't changed in Amazon VPC?

Short description

To see why traffic is stopped because of port block, check the following:

• Complete timeouts to the IP address for specific or all types of traffic.
• Network configuration for your security group, network access control lists (network ACL), and route tables are configured correctly to establish connection.
• Reachability Analyzer shows reachable for the given source to the destination on the blocked port number.
• Amazon VPC Flow Logs show REJECT for the traffic that's allowed in the security group and network ACL.

Also, ports in your Amazon VPC might be blocked with this error:

"Port block due to abuse report. If your resource is implicated in a security activity, your ports will be blocked."

Resolution

To resolve your blocked port, complete these tasks:

• Check AWS Health Dashboard for abuse alerts and complete the steps provided in the alert to resolve your blocked port. If the abuse report issue isn't resolved, then the ports for that account in that Region are blocked.
• Check your email for a notification from ec2-abuse@amazon.com. Review the abuse notice to see what content or activity was reported. The AWS Trust & Safety team sends abuse reports to your account's security point of contact. Make sure that you reply to the notification and explain how you plan to prevent the abuse activity in the future.

Note: If you don't respond to an abuse report within 24 hours, then AWS might block your resources or suspend your AWS account. For more information, see What do I do when I receive an abuse report from AWS about my resources?

Related information

What do I do if I notice unauthorized activity in my AWS account?

What do I do if I'm having trouble signing in to or accessing my AWS account?

Automate processes to handle and remediate AWS Abuse alerts