Re: Accessing whatismyip.com routes my request through [ ref:_00Df41QZ6C._5005GgqrI2:ref ]

From: Ish Sookun <ish_at_lsl.digital>
Date: Mon, 3 May 2021 21:34:09 +0400


Thank you for your prompt reply, Dan. I hope to read your findings soon.

Regards,

Ish Sookun

On 03/05/2021 19:29, support_at_netsweeper.com wrote:
> Ish,
>
> Thanks for reaching out to Netsweeper Support, we are looking into this.
>
> Regards,
>
>
> Dan Thompson | Netsweeper Support Lead
>
>
> --------------- Original Message ---------------
> From: Ish Sookun [ish_at_lsl.digital <mailto:ish_at_lsl.digital>]
> Sent: 5/3/2021 9:44 AM
> To: support_at_netsweeper.com <mailto:support_at_netsweeper.com>
> Cc: mauritius-internet-users_at_lists.elandnews.com
> <mailto:mauritius-internet-users_at_lists.elandnews.com>
> Subject: Accessing whatismyip.com
> <https://whatismyip.com> routes my
> request through
>
> Hello,
>
> I am accessing whatismyip.com
> <https://whatismyip.com> from Mauritius.
>
> I notice that my request is sent to 165.22.199.12
> <http://165.22.199.12> (a server
> hosted in
> Netherlands) and then proxied to whatismyip.com
> <https://whatismyip.com>.
>
> A reverse lookup on the address returns the DNS
> mauritiusams3.netsweeper.com
> <https://mauritiusams3.netsweeper.com>.
>
> ; <<>> DiG 9.16.8-Ubuntu <<>> -x 165.22.199.12
> <http://165.22.199.12>
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41092
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 65494
> ;; QUESTION SECTION:
> ;12.199.22.165.in-addr.arpa
> <https://12.199.22.165.in-addr.arpa>. IN PTR
>
> ;; ANSWER SECTION:
> 12.199.22.165.in-addr.arpa
> <https://12.199.22.165.in-addr.arpa>. 1800 IN PTR
> mauritiusams3.netsweeper.com
> <https://mauritiusams3.netsweeper.com>.
>
> ;; Query time: 336 msec
> ;; SERVER: 127.0.0.53#53(127.0.0.53)
> <http://127.0.0.53#53(127.0.0.53)>
> ;; WHEN: Mon May 03 17:40:10 +04 2021
> ;; MSG SIZE rcvd: 97
>
> The DNS record mauritiusams3.netsweeper.com
> <https://mauritiusams3.netsweeper.com> points to
> 134.209.139.163 <http://134.209.139.163>.
>
> Can you please tell me why my request to whatismyip.com
> <https://whatismyip.com> is being proxied
> through 165.22.199.12
> <http://165.22.199.12>
>
> Regards,
>
> Ish Sookun
>
> ref:_00Df41QZ6C._5005GgqrI2:ref
Received on Mon May 03 2021 - 17:34:38 PST

This archive was generated by hypermail 2.4.0 : Tue May 04 2021 - 05:00:01 PST