Plex hacked? Cannot claim server

Plex Media Server NAS & Devices
1

Server Version#: 1.24.1
Player Version#: 4.63.0
Hi folks, I got an email today about a strange sign-in from Sydney and a bunch of other places. It looked like my user/pass was leaked. I went and changed my password and that’s when the trouble began. I couldn’t seem to connect to my QNAS Plex server. I tried everything but I still can’t “claim” my server. Even from the localserver:32400/web/ under +Your Media - it always prompts me to install Plex Media Server, even though I already have it installed. I removed it and blew away the config files and did a clean re-install and it still takes me to the “Add media to Plex” page where I can “GET PLEX MEDIA SERVER” endlessly. Did plex get hacked? Did my account get jacked?
Thanks

2

Breath for a second. :slight_smile:

You changed your password (to be safe) while PMS was running.

Not a problem.

To prevent your server from really being jacked/hacked, a password change isn’t “Pushed” to new devices.

I will ask you – did you “Sign out all devices” (checkbox) as you changed your password?

If you didn’t, and if you want to be ultra safe, you can go back, change it again AND check that box. It will make anything and everything get forcibly signed signed out by Plex.tv

Assuming that is done - lets get your server signed in cleanly again.

  1. Stop Plex on the QNAP
  2. Create a shared folder named “PlexData” (exactly as I’ve typed it) anywhere you want.
  3. Start PMS, let it run one minute
  4. Stop it again.

Now, when you open FileStation, you’ll find PlexData / Plex Media Server.

In Plex Media Server you’ll find all your server’s internal files (including the Preferences.xml which contains your account info and what we will clean out so you can bring it back into your account.

  1. Install the QNAP Text Editor from App Center if not already installed

  2. File Station: Navigate PlexData/Plex Media Server

  3. Right-click Preferences.xml → Open in Text Editor

  4. Everything you see is in Name="Value" pairs.

  5. Carefully remove the following Name=“Value” pairs (some might not exist)

  • PlexOnlineUsername
  • PlexOnlineToken
  • PlexOnlineEmail
  • PlexOnlineHome
  • secureConnections

  1. Save the file

  2. Now start Plex

  3. If you still have your Plex/web open, Sign out (upper right) as those credentials are invalid

  4. Open http://lan.ip.of.qnap:32400/web

  5. It might say “Got It” – fine

  6. It will want you to sign in * claim it. – ok

  7. If it starts asking you to create new library sections – SKIP that

  8. Continue to proceed through to the dashboard.

  9. You should find everything back as it was.

After you’ve confirmed it’s good, now you can get your devices linked again.

3

Yes, I signed out of all devices.
I edited the Preferences.xml file using vim because the QNAP Text Editor couldn’t seem to find my file located at /share/PlexData/Plex Media Server\Preferences.xml
None of those values were in the file, only this

Preferences OldestPreviousVersion=“1.24.1.4931-1a38exxxx” MachineIdentifier=“e7xxxxxx-1c6a-46a2-a57e-1881e706748d” ProcessedMachineIdentifier=“a7a7ddxxxxxxxxxxd96b065809c96e63cedb997c” AnonymousMachineIdentifier=“e7cea321-xxxx-xxxx-a5b9-addfa504245a” MetricsEpoch=“1”

Whey I try to launch Plex now I get “Not Authorized”
It’s trying to launch server:32400/web/index.html#!/setup/ProcessedMachineIdentifier found in Preferences.xml. but as I said I’m getting “Not Authorized - you do not have access to this server”

4

GACK!

Don’t launch any exotic URLs. They’ll only get you in trouble because most are outdated (old Plex/Web versions)

  1. Sign out of Plex/web
  2. Open an Incognito to it.
  3. If you’re not using an RFC-1918 subnet AND on the same subnet with it – it will not allow you to claim it – UNLESS you use the SSH curl method.

Since you ran with vim, I presume curl is no biggie

  1. get the preferences.xml file ready (which the above looks like it is)
  2. Start Plex and let it sit
  3. in the browser: open plex.tv/claim
  4. It will show a claim token – COPY it to your browser
  5. Now, in that SSH session (you have a 5 minute limit)
curl -X POST 'http://127.0.0.1:32400/myplex/claim?token=PASTE_TOKEN_HERE'

it will look llike

curl -X POST 'http://127.0.0.1:32400/myplex/claim?token=claim-324x526fc33'

It will sit there quietly with no output for 15-20-30 seconds while your server and plex.tv communicate and negotiate a new token pair.

When it’s done, It will spit out a whole bunch of feature flags (XML)

The very last line will be </MyPlex>

The server is now yours again.

1 Like
5

Looks like going to the site Incognito got 'er done. It’s scanning my libraries now. Thanks for your help!!!

6

Thank you!!!

I have been struggling with this for a while. The above works.

Best,

7

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.