Suspicious TCP Traffic to US IP

Server Version#: 1.21.1.3830
Player Version#: N/A

Myself and a few other friends have noticed connections between our Plex Server and a US based IP Address - 75.177.73.180. Connections are all over TCP 17539. These are bi-directional communications with a decent amount of data transferred. Looks like these occur every single day, all day long. Traffic ranges from a few kb transferred both ways to a few mb.

I’ve scoured the internet trying to track down what this IP is, no hits. I thought it was maybe just my server, but when a few other friends also found the same traffic it piqued my curiosity. Worth noting other friends also don’t seem to have this traffic. Hopefully this is some sort of expected communication. Always to the same IP, 75.177.73.180, always the same port, TCP 17539.

Any info would be greatly appreciated :slight_smile:

This type of enquiry has been obsolete since the 1990’s. All exposed IP addresses should be assumed to get hit with all manner of probes around the clock. People discovered a long time ago that “souring the internet” whenever this happens is something of a waste of time.

It could be your server talking to plex.tv and sending telemetry and statistical data.
It could be your server sending crash reports.
It could be the server reporting its availability for external clients and also actively testing the connection.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.