Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

NIOS DNS DHCP IPAM

Reply

Reasons for DNS proxy server establishing connections to AWS on port 443?

Authority
Posts: 33
1939     0

We have an internal recursive server configured to proxy DNS requests for public domains for B1TD and I see quite a few connections to AWS IPs on port 443 and am wondering if there's a valid reason for that.

We do have some internal forwarding domains set up, but I would expect those to use port 53 and none are explicitly hosted by Amazon.

Re: Reasons for DNS proxy server establishing connections to AWS on port 443?

Expert
Posts: 187
1940     0

Maybe you have some clients trying to do DoH?

Paul Roberts
PCN (UK) Ltd

All opinions expressed are my own and not representative of PCN Inc./PCN (UK) Ltd. E&OE
Showing results for 
Search instead for 
Did you mean: 

Recommended for You