plexmediaserver connecting to suspect IP

  • I noticed the following entry repeated in my logs


    2020-04-03T22:39:04+0200 myserver kernel: IP OUTPUT drop: IN= OUT=eth0 SRC=192.168.XX.XX DST=82.94.168.25 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=45721 DF PROTO=TCP SPT=44920 DPT=443 WINDOW=446 RES=0x00 ACK URGP=0


    ss -tp reveals

    ESTAB 0 0 192.168.XX.XX:44920 82.94.168.25:https users:(("Plex Media Serv",pid=1422,fd=83))


    82.94.168.25 gives an ngix server 403 error and the address does not seem like a legitimate plex related address.


    What's this about?

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!