Having learned that my unraid box might have been compromised I've installed iftop and nethogs.

 

Only process making connections is plex media server and mostly from my unraid box to my PC and TV

but also some random IPs

 

Tried looking up the IPs but found nothing special.

 

Is this normal behaviour or have my plex executable been compromised?

 

/Jacob

This would be a question better directed at Plex, rather than unraid. They would be able to confirm what those IPs are for, or if they are foreign. Most likely, however, they are the IPs for the Plex server as the Plex application allows both direct and indirect connections thru their own "proxy" service on their side.