Plex web is spamming my firewall trying to connect to either 172.44.0.1 or 172.11.0.1

Plex Media Server
, ,
1

Plex web is spamming my firewall trying to connect to either 172.44.0.1 or 172.11.0.1
source ports are in the 511xx range. Destinations port is 32400.

Plex seems to work fine, and there’s nothing in the logs that suggest any issues.
I’m more curious why this is happening and what it’s trying to do accessing these locations.

I’m not a networking\firewall expert, but I’m trying to learn this stuff.

Thanks

Server Version#: Latest
Player Version#: Latest
<If providing server logs please do NOT turn on verbose logging, only debug logging should be enabled>

2

We will need your server DEBUG logs zip (which should capture this).

As FYI, to confirm you know.

  1. Plex.tv has listed you using the following Local LAN addresses:
    – 10.0.11.200 :white_check_mark:
    – 172.18.0.1 :white_check_mark:
    – 172.44.0.1 :x:

  2. Public (registered WAN IP) of 104.x.x.x

By RFC-1918 definition, you’ve got at least one misconfiguration.

If you were to use 172.11.x.x, this is also a publicly routed IP range
(it doesn’t show on your Plex.tv record for the server)

3

Well. 104.x.x.x is indeed my WAN IP. I have no clue what the 172 address are and is why I’m confused. What’s doubly confusing is how plex seems to be working fine even though the firewall is blocking that traffic.

Plex Media Server Logs_2024-04-22_22-12-37.zip (3.8 MB)

Really appreciate it.

4

I did some digging.

It appears Plex.tv is using some of those addresses now. (LINODE)
If you’re using Remote Access, and it’s working, I would ignore it.
If Remote Access isn’t working, but you want it to, we can look into that.

I usually don’t give blocked firewall traffic any consideration unless I get a DOS attack alert (a lot of packets from the same source which are being dropped).

On my WAN address, I’m constantly being port scanned. It seems this part of Pa is very Net-Hostile.

I’ve configured my LAN to watch for DOS attacks and ignore everything else.
(I use pfsense for that reason)

As for those addresses. Do you have other apps running which get VPN addresses ?

5

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.