Everything remote is disabled so what are these connections?

[WhatDidTheFirefoxSay]

I have self repair off, safe browsing off, sync off, telemetry off.

Three times, I opened a blank page and let it idle and these IPs come up from amazon, cloudfront and github.

54.192.29.143 80 (detectportal.firefox.com) ?

35.167.163.238 433 Amazon

151.101.28.133 443 github

search.services.mozilla.com

52.88.214.233 443 Amazon

52.35.159.155 443 Amazon

The above is not including the push hosts.

I especially want to know what this Amazon host is.

Another Amazon host came up with a lot of connections.
216.137.57.174 443

I am not running any plugins and all my addons are well reviewed and common. I am also using DNSSEC.

[malliz]

Mozilla uses Amazon cloud servers

[Reflective]

See also: https://support.mozilla.org/t5/Protect- ... /ta-p/1748

[Grumpus]

35.167.163.238 433 is an ip on the Merit Network which used to be a College Network in North Central US. (35.152.0.0 - 35.183.255.255)
The Merit network went commercial, no longer affiliated with the College and is full of spammers hiding behind the Amazon cloud.
Since Amazon Cloudfront has been taking over so many of the on-line IP identifiers this information is constantly changing and is becoming more anonymous.