Plex port activity

General Discussions
,
1

I’m running Plex in docker on unraid, with a windows client. I’ve noticed in the server log Plex is constantly running a series of GET requests on itself:

Mar 17, 2023 11:31:24.125 [0x151644a5db38] DEBUG - Request: [127.0.0.1:48442 (Loopback)] GET /identity (4 live) #91a Signed-in
Mar 17, 2023 11:31:24.125 [0x1516487f6b38] DEBUG - Completed: [127.0.0.1:48442] 200 GET /identity (4 live) #91a 0ms 398 bytes (pipelined: 1)

This is pretty invisible to an end user, but curiously my unraid server hosting the Plex docker is now getting a mass of pings from my windows machine:

Mar 17 11:23:13 Tower nginx: 2023/03/17 11:23:13 [error] 2732#2732: *686212 limiting requests, excess: 20.208 by zone “authlimit”, client: 192.168.2.214, server: , request: “PROPFIND /login HTTP/1.1”, host: “WINDOWSMACHINE”
Mar 17 11:23:13 Tower nginx: 2023/03/17 11:23:13 [error] 2732#2732: *686215 limiting requests, excess: 20.188 by zone “authlimit”, client: 192.168.2.214, server: , request: “PROPFIND /login HTTP/1.1”, host: “WINDOWSMACHINE”

Scanning my machine with the Tcpview app, I can see that my windows machine is constantly trying to hit the unraid host with similar port numbers that the plex server is pinging itself with. I can’t tie it together, because I can’t tell who is making the calls, but the port numbers seem to correlate with what the Plex server is doing to itself. Any idea what I can check?

2

Without seeing your DEBUG logs, it’s not possible to refine this but

I am suspicious of the PC trying to identify your Plex server at that level.
It’s also highly unusual in my experience with Linux- based PMS servers.

3

I’m not sure what on the Windows PC is calling the Plex host, it looks tangentially related to calls the Plex Server is making to itself, but there is no log activity that correlates to it in the Plex client logs, or other Plex logs in the AppData folder. I was reaching out to see if there is anything further I can do with the Plex client to expand it’s logging or if any of this rings a bell.

At the moment I’m trying to track what process is calling the host using some SysInternals tools to trace what program on the Windows machine could be doing the call. The process on the Windows machine is some generic web client and intermittently shoots out a barrage of calls to the host.

4

PMS talks to itself on address 127.0.0.1 with PUT and GET commands.

“PROPFIND /login HTTP/1.1”,

That looks like an intrusion attempt because I don’t know what it is (if I’m being candid)

5

Is there a way to send my server log? I think my Plex client is doing something funny, but what the server is doing is hinting at it, while the client isn’t logging what it’s doing.

6

Nvm, solved it - looks like Windows Photos app polls library locations in the background and was causing the log overflow. Thanks!

7

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.