Accessing whatismyip.com routes my request through

From: Ish Sookun <ish_at_lsl.digital>
Date: Mon, 3 May 2021 17:44:33 +0400


Hello,

I am accessing whatismyip.com from Mauritius.

I notice that my request is sent to 165.22.199.12 (a server hosted in
Netherlands) and then proxied to whatismyip.com.

A reverse lookup on the address returns the DNS
mauritiusams3.netsweeper.com.

; <<>> DiG 9.16.8-Ubuntu <<>> -x 165.22.199.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;12.199.22.165.in-addr.arpa. IN PTR

;; ANSWER SECTION:
12.199.22.165.in-addr.arpa. 1800 IN PTR mauritiusams3.netsweeper.com.

;; Query time: 336 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon May 03 17:40:10 +04 2021
;; MSG SIZE rcvd: 97

The DNS record mauritiusams3.netsweeper.com points to 134.209.139.163.

Can you please tell me why my request to whatismyip.com is being proxied
through 165.22.199.12

Regards,

Ish Sookun
Received on Mon May 03 2021 - 13:45:01 PST

This archive was generated by hypermail 2.4.0 : Mon May 03 2021 - 16:15:10 PST