Help & troubleshooting for network issues, including connecting your device to your home Wi-Fi network, connecting to public networks, troubleshooting wireless issues & ethernet connections, and optimizing streaming performance.
AWS - Amazon Web Services for cloud storage and web hosting and probably other things.
My guess is that it is to download picture that you can see on Roku home screen on the right side. In plain English - advertisement and probably tracking of what you watch and your habits so data can be reported to NSA, CIA, FBI, and KGB.
PS For a few weeks I was using AdGuard DNS and picture on my Roku home screen disappeared. Then I switched back to my ISP DNS and picture came back. Would you mind sharing DNS of those AWS hosts so I can add them to my HOSTS file, please?
You don't need my lan subnet but this is what I see when I run netstat on the router itself. Please report back the results of blocking this IP. If it causes no problem I will do the same. I don't want to piss off my wife lol.
When I upgraded to a hardware firewall that was blocking all by default, I discovered this traffic. My Roku devices are trying to communicate over port 2350 about once every 5 seconds. Its a lot of garbage traffic. When this port is blocked, all the sidebar ads stopped. I'm only left with a single "Smithonian" ad that no longer rotates, its just that static picture.
Here is a list of IPs and Hostnames that my firewall is blocking a TCP (SYN) packet on port 2350: