I have noticed some strange activity on a dns server of mine and wanted to pick some brains. Every request being made to this dns server has an additional udp packet being sent to an ec2 IP address in Ireland. FYI, I am in the US so this should not be going to the Ireland at all. The udp packet sent each time contains each request being made on my dns server.
This is an internal dns server, running dnsmasq, and using OpenDNS for its lookups. Below are a couple of shots for some additional info. So I do not believe this address ec2 address should be appearing but I could be wrong. That is why I want to ask everyone here. Any info, tips, advice on this?
