Hello,
I am accessing whatismyip.com from Mauritius.
I notice that my request is sent to 165.22.199.12 (a server hosted in
Netherlands) and then proxied to whatismyip.com.
A reverse lookup on the address returns the DNS
mauritiusams3.netsweeper.com.
; <<>> DiG 9.16.8-Ubuntu <<>> -x 165.22.199.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;12.199.22.165.in-addr.arpa. IN PTR
;; ANSWER SECTION:
12.199.22.165.in-addr.arpa. 1800 IN PTR mauritiusams3.netsweeper.com.
;; Query time: 336 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon May 03 17:40:10 +04 2021
;; MSG SIZE rcvd: 97
The DNS record mauritiusams3.netsweeper.com points to 134.209.139.163.
Can you please tell me why my request to whatismyip.com is being proxied
through 165.22.199.12
Regards,
Ish Sookun
Received on Mon May 03 2021 - 13:45:01 PST