Welcome to our forums! Please take a few moments to read through our Community Guidelines (also conveniently linked in the header at the top of each page). There, you'll find guidelines on conduct, tips on getting the help you may be searching for, and more!

Seeing a lot of external connections to port 80?

LawjicLawjic Validating, Plex Pass Posts: 2 Plex Pass

I'm running my Plex Media Server from an oVirt cluster, and I noticed the host which is housing this VM had network about 70-90% utilized. When I logged into my VM, I saw a lot of connections to port 80 externally.

I stopped plexmediaserver service, and this stopped. Do we know what plex is trying to reach out to externally on port 80 for all of these addresses?

Here's an example list:

128.59.59.71:80
134.121.64.80:80
152.19.134.43:80
160.10.5.26:80
173.243.16.24:80
192.17.174.4:80
192.73.23.18:80
198.255.114.50:80
198.60.22.13:80
199.102.235.174:80
204.157.3.70:80
207.244.94.80:80
208.100.4.53:80
208.85.242.118:80
64.250.112.70:80
65.182.224.39:80
66.45.230.130:80
67.218.95.34:80
67.55.67.172:80
69.12.162.27:80
71.19.224.254:80

Looks like some kind of mirror connectivity/traffic - but for what?

71.59.59.128.in-addr.arpa name = teewurst.cc.columbia.edu.
80.64.121.134.in-addr.arpa name = mirrors.eecs.wsu.edu.
43.134.19.152.in-addr.arpa name = distro.ibiblio.org.
26.5.10.160.in-addr.arpa name = reflector.westga.edu.
24.16.243.173.in-addr.arpa name = host-173-243-16-24.millry.net.
4.174.17.192.in-addr.arpa name = reflection.cites.illinois.edu.
18.23.73.192.in-addr.arpa name = mirrors.wvstateu.edu.
50.114.255.198.in-addr.arpa name = 198-255-114-50.host-engine.com.
13.22.60.198.in-addr.arpa name = mirrors.xmission.com.
** server can't find 174.235.102.199.in-addr.arpa.: NXDOMAIN
70.3.157.204.in-addr.arpa name = mirror.cogentco.com.
** server can't find 80.94.244.207.in-addr.arpa.: NXDOMAIN
53.4.100.208.in-addr.arpa name = mirror.steadfast.net.
118.242.85.208.in-addr.arpa name = mirror.san.fastserv.com.
** server can't find 70.112.250.64.in-addr.arpa.: NXDOMAIN
39.224.182.65.in-addr.arpa name = white.web-ster.com.
130.230.45.66.in-addr.arpa name = mirror.trouble-free.net.
34.95.218.67.in-addr.arpa name = mirror.net.cen.ct.gov.
172.67.55.67.in-addr.arpa name = mirrors.webair.com.
27.162.12.69.in-addr.arpa name = mirrors.200p-sf.sonic.net.
254.224.19.71.in-addr.arpa name = 254.224.19.71.in-addr.arpa.

Thanks for any info you may have on this!

Answers

  • jmckeejmckee Members, Plex Pass, Plex Ninja Posts: 4,780 Plex Ninja

    Are you sure that network traffic was related to plex?

    All of those mirrors (At least the ones I checked) all appear to be linux distro mirrors.

  • ChuckPAChuckPA Members, Plex Pass, Plex Ninja, Plex Team Member Posts: 13,683 Plex Team Member
    edited May 17

    They are Linux distro mirrors. Whoever you're sharing the host with is running a distro mirror server.

    Nothing is related to Plex. Plex doesn't use port 80

  • LawjicLawjic Validating, Plex Pass Posts: 2 Plex Pass

    Thank you both. Must have been ironic timing I suppose. Just so happens to be when I stopped plex services, these connections go away, but what you're saying does make sense.

    Many thanks!

Sign In or Register to comment.