# Plex Server scans for wallets? **URL:** \ **Category:** Plex Media Server\ **Tags:** server-linux\ **Created:** [February 15, 2022, 6:34pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580 "2022-02-15T18:34:19Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 15, 2022, 6:34pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/1 "2022-02-15T18:34:19Z")
I checked the plex logs (Plex Media Server.log) today and found the following: ```auto Feb 15, 2022 02:11:21.543 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.mozilla/firefox": boost::filesystem::status: Permission denied: "/root/.mozilla/firefox" Feb 15, 2022 02:11:24.640 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/opera/databases/chrome-extension_hnjalnkldgigidggphhmacmimbdlafdo_0": boost::filesystem::status: Permission denied: "/root/.config/opera/databases/chrome-extension_hnjalnkldgigidggphhmacmimbdlafdo_0" Feb 15, 2022 02:11:27.737 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/google-chrome": boost::filesystem::status: Permission denied: "/root/.config/google-chrome" Feb 15, 2022 02:11:30.833 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/BraveSoftware/Brave-Browser": boost::filesystem::status: Permission denied: "/root/.config/BraveSoftware/Brave-Browser" Feb 15, 2022 02:11:33.928 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.bitcoin": boost::filesystem::status: Permission denied: "/root/.bitcoin" Feb 15, 2022 02:11:37.024 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.dogecoin": boost::filesystem::status: Permission denied: "/root/.dogecoin" Feb 15, 2022 02:11:40.120 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.litecoin": boost::filesystem::status: Permission denied: "/root/.litecoin" Feb 15, 2022 02:11:43.217 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.dashcore": boost::filesystem::status: Permission denied: "/root/.dashcore" Feb 15, 2022 02:11:46.311 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.electrum/wallets": boost::filesystem::status: Permission denied: "/root/.electrum/wallets" Feb 15, 2022 02:11:49.421 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.walletwasabi/client/wallets": boost::filesystem::status: Permission denied: "/root/.walletwasabi/client/wallets" Feb 15, 2022 02:11:52.520 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.local/share/Daedalus/mainnet/wallets": boost::filesystem::status: Permission denied: "/root/.local/share/Daedalus/mainnet/wallets" Feb 15, 2022 02:11:55.614 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.local/share/Coinomi/wallets": boost::filesystem::status: Permission denied: "/root/.local/share/Coinomi/wallets" Feb 15, 2022 02:11:58.716 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.ethereum/keystore": boost::filesystem::status: Permission denied: "/root/.ethereum/keystore" Feb 15, 2022 02:12:01.811 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/Jaxx/Local Storage": boost::filesystem::status: Permission denied: "/root/.config/Jaxx/Local Storage" Feb 15, 2022 02:12:04.905 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/com.liberty.jaxx/IndexedDB/file __0.indexeddb.leveldb": boost::filesystem::status: Permission denied: "/root/.config/com.liberty.jaxx/IndexedDB/file__ 0.indexeddb.leveldb" Feb 15, 2022 02:12:07.999 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/snap/bitpay/current/.bitpay/app/Local Storage/leveldb": boost::filesystem::status: Permission denied: "/root/snap/bitpay/current/.bitpay/app/Local Storage/leveldb" Feb 15, 2022 02:12:11.093 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/atomic/Local Storage/leveldb": boost::filesystem::status: Permission denied: "/root/.config/atomic/Local Storage/leveldb" Feb 15, 2022 02:12:14.200 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.config/Exodus/exodus.wallet": boost::filesystem::status: Permission denied: "/root/.config/Exodus/exodus.wallet" Feb 15, 2022 02:12:17.300 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.electron-cash/wallets": boost::filesystem::status: Permission denied: "/root/.electron-cash/wallets" ``` Why tries plex server access to wallet files??? I found this logs for all users on my system! Server Version#: 1.25.5.5492 ---
**Author:** ![anon5074910](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@anon5074910](https://forums.plex.tv/u/anon5074910)\ **Post date:** [February 15, 2022, 6:41pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/2 "2022-02-15T18:41:04Z")
Looks like you have added `/root` as part of your library. Under your server settings go to manage → libaries and then [edit your library](https://support.plex.tv/articles/200289266-editing-libraries/). From there go to the add folders tab and remove the folders which should not be scanned and add only the ones you have media in. Example below … ![Screenshot from 2022-02-15 18-39-24](https://global.discourse-cdn.com/plex/original/4X/b/6/d/b6d34ab825786dc6ae0c50afec952612283ee854.jpeg) ---
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 15, 2022, 6:54pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/3 "2022-02-15T18:54:57Z")
I have checked now all libraries: No, I don’t have maintained /root All media content is located in (and have there subfolders for each library): /home/plexmediadata Also the named paths of the log file don’t exist. So it looks to me that the server actively searches for such folders. ---
**Author:** ![anon5074910](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@anon5074910](https://forums.plex.tv/u/anon5074910)\ **Post date:** [February 15, 2022, 6:59pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/4 "2022-02-15T18:59:08Z")
Very strange. Just checked my logs and I don’t have any of that. Would you be willing to upload a copy of your [server logs](https://support.plex.tv/articles/200250417-plex-media-server-log-files/) so we can take a peek and see what might be happening ? ---
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 15, 2022, 8:44pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/5 "2022-02-15T20:44:39Z")
I censored just some user names on my server with xxx1,2,3… [plex.txt](https://forums.plex.tv/uploads/short-url/ghcjysMmw7cMc1XoO73p5nDIW3.txt) (66.3 KB) ---
**Author:** ![anon5074910](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@anon5074910](https://forums.plex.tv/u/anon5074910)\ **Post date:** [February 15, 2022, 8:58pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/7 "2022-02-15T20:58:40Z")
Understand your reluctance to upload logs but really that snipit tells very little. Lets see if a plex member of staff or ninja will jump on this thread and you can DM your full logs. However, same errors but this time with `/home/` also. Can you provide a screenshot of the add folders from your libraries as I’d like to see what you actually have in there. ---
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 15, 2022, 9:18pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/8 "2022-02-15T21:18:15Z")
I’m wondering, why plex searches for such folders. They do not exist on the server. ---
**Author:** ![tom80H](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/tom80h/32/19753_2.png) [@tom80H](https://forums.plex.tv/u/tom80H)\ **Post date:** [February 15, 2022, 9:25pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/9 "2022-02-15T21:25:12Z")
Not sure it does – at least I’ve never seen doing it. In addition to dokuro’s question from above (screenshot from the `Add Folder` tab of the library config)… what agent are you using for the library in question? Any custom/3rd party agents/scanners? The log snippet you’ve provided doesn’t provide those details. If it’s an actual scan you should see what library is being scanned – otherwise it might be worth checking all libraries for those information. ---
**Author:** ![Volts](https://avatars.discourse-cdn.com/v4/letter/v/a5b964/32.png) [@Volts](https://forums.plex.tv/u/Volts)\ **Post date:** [February 15, 2022, 9:33pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/10 "2022-02-15T21:33:59Z")
> [@anon5074910](#): > > same errors but this time with `/home/` also. If this is happening for all user directories on the system, and `/root` too, perhaps `/` has been added to a Library, so everything below it is being scanned. Or perhaps there is a symlink somewhere within a Library, pointing back up to /. `find "/path/to/Library" -type l` ---
**Author:** ![BigWheel](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bigwheel/32/78783_2.png) [@BigWheel](https://forums.plex.tv/u/BigWheel)\ **Post date:** [February 15, 2022, 10:15pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/12 "2022-02-15T22:15:16Z")
@martinr92 there is nothing in the server afaik that would search those directories. If you would not mind messaging me your logs then I can pass them along to our server team to check. You can click on my username/avatar to message them to me ---
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 15, 2022, 10:18pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/13 "2022-02-15T22:18:58Z")
It seems not to be triggered by a library scan. The “Plex Media Scanner.log” contains only one entry, but this is a few hours later (the crazy action happened at 2am). ```auto Feb 15, 2022 05:44:18.414 [0x7f1ba3c28b38] INFO - Plex Media Scanner v1.25.5.5492-12f6b8c83 - Debian GNU/Linux PC x86_64 - build: linux-x86_64 - GMT 01:00 Feb 15, 2022 05:44:18.414 [0x7f1ba3c28b38] INFO - Linux version: 10 (buster), language: en-US Feb 15, 2022 05:44:18.414 [0x7f1ba3c28b38] INFO - Processor: 16-core Intel(R) Xeon(R) CPU D-1541 @ 2.10GHz Feb 15, 2022 05:44:18.415 [0x7f1ba3c28b38] INFO - /usr/lib/plexmediaserver/Plex Media Scanner --scan --refresh --section 6 --activity 7adeaaee-6b37-4fcb-a334-9428977d88d2 --directory /home/riedltv/published/NFL Super Bowl/Season 2022 ``` The previously uploaded logs is all I have / all what plex has logged. It seems to access this folders totally out of nowhere. Instead of posting here screenshots of all libraries, I made some screenshots of the SQlite DB instead (hope it’s ok): Agents Used (nothing special; no plugins): ![image](https://global.discourse-cdn.com/plex/original/4X/e/f/4/ef4e12e4459ca5f297ca2036cfae369600bda78c.jpeg) And the locations: ![image](https://global.discourse-cdn.com/plex/original/4X/c/a/4/ca41dcaaaf6890506eb6106532e1ce9290a9c6ee.jpeg) @BigWheel Thanks, I will send you a private message. ---
**Author:** ![Volts](https://avatars.discourse-cdn.com/v4/letter/v/a5b964/32.png) [@Volts](https://forums.plex.tv/u/Volts)\ **Post date:** [February 15, 2022, 10:22pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/14 "2022-02-15T22:22:51Z")
That’s clever. Try a modified version of the command I suggested, using those `section_locations.root_path` entries. ```auto find /home/plexmediadata/movies /home/plexmediadata/homevideos /home/plexmediadata/shows /home/riedltv/published /home/plexmediadata/esc -type l ``` Can I ask - is `/home/plexmediadata` dedicated to media? Or is it also the location of your Plex metadata, **Preferences.xml** , etc? ---
**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\ **Post date:** [February 15, 2022, 11:23pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/15 "2022-02-15T23:23:49Z")
I would like ask regarding - > [@martinr92](#): > > The previously uploaded logs is all I have / all what plex has logged. It seems to access this folders totally out of nowhere. Do you have any media downloading automation and does that automation run from your home directory ? ---
**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\ **Post date:** [February 15, 2022, 11:44pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/16 "2022-02-15T23:44:57Z")
@martinr92 I am reviewing some longs from @BigWheel . I believe these are your logs. Per your OP, > [@martinr92](#): > > Why tries plex server access to wallet files??? > I found this logs for all users on my system! Are you using a customized configuration - `override.conf` file ? ---
**Author:** ![beta1234](https://avatars.discourse-cdn.com/v4/letter/b/57b2e6/32.png) [@beta1234](https://forums.plex.tv/u/beta1234)\ **Post date:** [February 16, 2022, 12:03am UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/17 "2022-02-16T00:03:57Z")
This is so scary, PMS looking for crypto wallets ---
**Author:** ![BigWheel](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bigwheel/32/78783_2.png) [@BigWheel](https://forums.plex.tv/u/BigWheel)\ **Post date:** [February 16, 2022, 12:06am UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/18 "2022-02-16T00:06:05Z")
Also @martinr92 i didn’t notice you don’t have [debug logging](https://support.plex.tv/articles/201643703-reporting-issues-with-plex-media-server/#toc-1) enabled. please turn it on and when you can reproduce get the logs after it happens. ![Plex](https://global.discourse-cdn.com/plex/original/4X/2/2/8/228f0080e3271b0477c91041ba656da09b95ec50.png) ---
**Author:** ![BigWheel](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bigwheel/32/78783_2.png) [@BigWheel](https://forums.plex.tv/u/BigWheel)\ **Post date:** [February 16, 2022, 12:07am UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/19 "2022-02-16T00:07:38Z")
> [@beta1234](#): > > This is so scary, PMS looking for crypto wallets his logs indicate it is just looking at folders in his `home` directory in which he happens to have crypto wallet stuff . Plex isn’t trying to access those specifically. ---
**Author:** ![FordGuy61](https://avatars.discourse-cdn.com/v4/letter/f/22d042/32.png) [@FordGuy61](https://forums.plex.tv/u/FordGuy61)\ **Post date:** [February 16, 2022, 12:12am UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/20 "2022-02-16T00:12:15Z")
> [@beta1234](#): > > This is so scary, PMS looking for crypto wallets Or more likely a bug or configuration issue, picking up all directories that begin with `.` (ex: `.mozilla` and `.config`). Don’t jump to conclusions. ---
**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\ **Post date:** [February 16, 2022, 3:04am UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/21 "2022-02-16T03:04:22Z")
I see this as a configuration issue. If I have media in `/home/chuck/movies' and '/home/chuck/tv', but mistakenly tell PMS to look in `/home/chuck` (incomplete path), standard Linux`readdir()`will see all the`dot` files in my home directory as well as any other subdirectories in /home/chuck. Linux default permissions will deny access. This is what’s being seen in the logs presented. ---
**Author:** ![martinr92](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/martinr92/32/230792_2.png) [@martinr92](https://forums.plex.tv/u/martinr92)\ **Post date:** [February 16, 2022, 12:02pm UTC](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580/22 "2022-02-16T12:02:26Z")
Yes it is very scary. To be once more clear: Those folders DO NOT exist. I don’t have any crypto / wallet things installed on my server. So it can’t be a “configuration issue”. Also the “readdir()” makes no sense, because this folder do not exist. This happened only once and is not reproducible. In my opinion someone / something is using some king of vulnerability of plex (maybe through the web server port). @BigWheel Can I permanently enable the Debug Logging without any performance impacts? [Next page](https://forums.plex.tv/t/plex-server-scans-for-wallets/776580.md?page=2)