Comments

1 comment

  • Avatar
    rotblitz

    These are reverse DNS lookups, i.e. obtaining the hostnames for the IP addresses 52.71.211.154 and 3.221.183.141.  I do not know either why an app in your network raises these DNS lookups.  But it looks like the destinations are on Amazon AWS.

    nslookup 52.71.211.154
    Server: local
    Address: 10.1.1.1

    Name: ec2-52-71-211-154.compute-1.amazonaws.com
    Address: 52.71.211.154


    nslookup 3.221.183.141
    Server: local
    Address: 10.1.1.1

    Name: ec2-3-221-183-141.compute-1.amazonaws.com
    Address: 3.221.183.141

    No idea why you think that these are military destinations.

    https://52.71.211.154/login leads to a login page for an analytics service.

    https://3.221.183.141/ leads to another website which has no document at this URL (HTTP error 404).

    0
    Comment actions Permalink

Please sign in to leave a comment.