Suspecious DNS query on ------------

General Discussions
1

Hi all,

My IDS/IPS is flagging some DNS queries from my plex server to solve plex.****.**

Since the country top domain is pw for the URL, my firewall is flagging it as a network intrusion.

Have anyone seen this domain before? Is it used for anything or is my plex server actually compromised?

Thank you!
Tony

[moderator edit: masked the URL for privacy reasons]

2

That’s one of the Plex servers shared with you.
The server owner has decided to use a custom domain name for it, on his own domain.

See also https://support.plex.tv/articles/206225077-how-to-use-secure-server-connections#toc-4
for a potential way to prevent this traffic getting flagged in the future.