Suspicious connections from Plex to the internet

[triguru]

Server Version#: 1.18.4.2171

Any idea why a Plex server would initiate an outbound SSH connection over 443 to pubsub01.spop.sjc.plex.bz ??

Screenshot: https://imgur.com/a/10UQ9bN

[beckfield]

pupsubload.plex.tv and getsentry.com

To be clear - we don't record any information of your media or users. The information sent on is anonymised and any information sent to services like this is to improve stability of the app (by sending error reports) or to give us an understanding of what apps are used (by sending anonymised analytics information). The pubsub address is part of us experimenting with a new messaging channel for future features. It's obviously only used by Plex. getsentry.com is used if the web app runs into a p…

[triguru]

SSH over a nonstandard port screams data exfiltration. Why not just HTTP/TLS ?

Edit: reading the linked post, this is not the same question. Different address & protocols

Using ssh is terrible, how do I know there isn’t a reverse ssh tunnel scenario here?