How can I determine the IP address of a client? Unknown user streaming as "Generic"

General Discussions
1

I’m wondering if there is a way to determine the IP address of a client? Starting March 18th I noticed some media being played which resulted in changes to my On Deck and continue watching lists. When I check the activity log it just states that the streams were being played by Generic.

The other strange behaviour, and I’m not sure if it’s related, is that I also noticed episodes of TV shows that I had not previously had in my library. These had been scanned by Plex Server, around the same time the unknown streaming took place. When I checked the location, sure enough I had these files on my Drobo.

I’m at a total loss to explain how this happened, but at this point the only starting place I have is to try and figure out who was connecting to Plex, and from where. I don’t think anyone has access to my Plex account directly, because that wouldn’t explain the addition of new files to my computer. Very confused.

2

If you install PlexPY you can get the IPs of all users at the stream level.

Do you have any DLNA clients accessing??

Sometimes they will show up as generic especially if they have been pre-authed in the server.

3

This was most likely caused by a DLNA client in your local network.

4

The only DLNA client I had been using was via InFuse 5 for Apple TV 4. I did think DLNA could be the cause of the streaming events and considered that might be the issue, but that doesn’t explain at all these random episodes showing up on my external NAS. It’s possible the 2 events are unrelated, but the timing is such that I think it’s unlikely. All of this occurred within about a 2 hour window.

I’ve tried to think through any scenario that would explain but I’m stumped.

I will install PlexPy when I get back to my server and see what I can find out. Thanks for the tip.

5

@poissonish said:
When I checked the location, sure enough I had these files on my Drobo.

What does the file date/time stamp on these files say? Were they added at the same time or earlier?

6

@OttoKerner said:

@poissonish said:
When I checked the location, sure enough I had these files on my Drobo.

What does the file date/time stamp on these files say? Were they added at the same time or earlier?

I’ve actually deleted the files already, but the streaming events seem to have started first. Unfortunately I can only see 50 pages of activity and I had forced a library refresh at the same because a newly added movie wasn’t showing up. Most of the 50 pages is just scanning existing media.

On the iOS Plex app when I look at my viewing history there are maybe 30 different shows that were all watched for about 1-2 mins.

7

@poissonish said:
I had forced a library refresh at the same because a newly added movie wasn’t showing up.

‘Refresh’ doesn’t help with that. Don’t do it without knowing the consequences.
https://support.plex.tv/hc/en-us/articles/200289306

On the iOS Plex app when I look at my viewing history there are maybe 30 different shows that were all watched for about 1-2 mins.

check if you have the hidden server setting disableRemoteSecurity enabled.
https://support.plex.tv/hc/en-us/articles/201105343-Advanced-Hidden-Server-Settings

Normally, this shouldn’t be set, but sometimes you get weird/uninformed recommendations in some forums.

8

Okay I just took a closer look at the activity log and there are hundreds of streams over the course of less than 5 minutes. At one point there are maybe 100 streams at the or more at the same time (1:27am), some for the same show at the same time.

9

Do you have a new device in your local network with a DLNA client on it?
Some DLNA clients ‘play’ all files automatically to make a preview picture.

10

I do, I recently had to borrow a 4K LG TV after my Plasma power supply blew. I’m sure it has some DLNA client built in. That is a possibility, I’ll take a look at that thanks for the suggestion.