Plex Server bouncing to Iran????

General Discussions
1

Hello All,

So I was tracking my Net Usage using an app from the MS Store called Lo and Behold.
It displayed the following information…

IP:
54.171.49.114
Host Name:
ec2-54-171-49-114.eu-west-1.compute.amazonaws.com
Local Port:
32400
Foreign Port;
32143
Country;
Iran Islamic Republic of
City;
Tehran

That’s just one of many.

Here is another IP Hit;
52.17.123.104
ec2-52-17-123-104.eu-west-1.compute.amazonaws.com
49818
443
Iran Islamic Republic of
Tehran

Any Idea why Plex Media Server would be bouncing there when I am pretty sure I do not share my Library with anyone in that particular country?

-NJ

2
  1. Plex uses various Amazon hosting servers for it’s testing remote connectivity and keep alive access, whether you share server or not.
  2. Your App is incorrect and/or using broken DNS.
    https://www.robtex.com/ip-lookup/54.171.49.114 - Dublin ireland (makes sense for eu-west)
    https://www.robtex.com/ip-lookup/52.17.123.104 - Again, Dublin.
3 
whois 54.171.49.114

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 54.171.49.114"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=54.171.49.114?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       54.160.0.0 - 54.175.255.255
CIDR:           54.160.0.0/12
NetName:        AMAZON-2011L
NetHandle:      NET-54-160-0-0-1
Parent:         NET54 (NET-54-0-0-0-0)
NetType:        Direct Allocation
OriginAS:
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2014-06-20
Updated:        2014-06-20
Ref:            https://whois.arin.net/rest/net/NET-54-160-0-0-1


OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2017-01-28
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://whois.arin.net/rest/org/AT-88-Z


OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064
OrgAbuseEmail:  abuse@amazonaws.com
OrgAbuseRef:    https://whois.arin.net/rest/poc/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-266-4064
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://whois.arin.net/rest/poc/AANO1-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-266-4064
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://whois.arin.net/rest/poc/ANO24-ARIN

whois 52.17.123.104

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 52.17.123.104"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=52.17.123.104?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Amazon Data Services Ireland Limited AMAZON-DUB (NET-52-16-0-0-1) 52.16.0.0 - 52.19.255.255
Amazon Technologies Inc. AT-88-Z (NET-52-0-0-0-1) 52.0.0.0 - 52.31.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#
4

That app you used is incorrect.

5

HMM.

Thanks!