I checked the plex logs (Plex Media Server.log) today and found the following: Feb 15, 2022 02:11:21.543 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.mozilla/firefox": boost::filesystem::status: Permission denied: "/root/.mozilla/firefox" Feb 15, 2022 02:11:24.640 [0x7f…

[image] gary_parker: Could it be logging the browser user-agent when it’s used to access the api with the stolen token, rather than actually registering as a player? Maybe someone of the Plex Team can explain, when a notification is sent? [image] dane22: Did you also force a sign out of …

Was this maintenance related with this topic here? Has anyone details or can simply confirm? [image] Issues with plex.tv API Plex's Status Page - Issues with plex.tv API.

Sorry for replying in-thread, but @SwiftPanda16 doesn’t seem to have DMs enabled. I ran through the ZeroSSL instructions for my servers and added the certs and all is good. Unfortunately I can’t easily auto-renew them as the same hardware also has LetsEncrypt certs on them for other services on 443 …

[image] gary_parker: Any updates on this Still work in progress.

[image] Plex Media Server Announcements Plex Media Server 1.25.7.5604 is now available to Plex Pass users in the Beta update channel. NEW: (Security) Certain critical server-management requests are now logged regardless of the configured log level (#13394) (Security) Do…

Indeed, next time we can hopefully track it :wink:

What would be the best string to grep for? Have been checking a few things daily but would be great to have something concrete to check for.

[image] anon5074910: What would be the best string to grep for? Since they tried to disable logging, I would go for: PUT /:/prefs?sendCrashReports=0&PushNotificationsEnabled=0&logDebug=0&LogVerbose=0 In addition, I would also look for boost::filesystem::status: Permission denied

If someone is still experiencing these logs and is able to put something like nginx as a reverse proxy I think it would be super useful to have raw requests logged. It’s clearly some sort of an attack and the part that’s unclear is if they are stealing tokens or if there is some way to bypass having…

Plex Server scans for wallets?

Plex Media Server

martinr92 March 1, 2022, 8:30pm 153

Looks like there is some progress…

Topic		Replies	Views
Plex media server.exe is trying to access your login info in Firefox? Plex Media Server server-windows	36	696	March 9, 2022
Action required: Important notice of a potential data breach General Discussions	412	6959	September 15, 2022
Plex Content Not Authorized Plex Media Server server-windows	38	816	June 24, 2023
Can Plex staff and potenially Big Brother access my files now? General Discussions	66	8509	February 1, 2018
Information related to security Vulnerabilities Plex Media Server server-linux	50	5083	March 27, 2026

Plex Server scans for wallets?

Related topics