Unauthorized/unknown users and devices accessing my library - what do I do? Very concerned...

General Discussions
1

So I noticed to my dismay tonight that there was a new user named “hired88” on my Plex server, and when I looked at the devices tab there were a bunch of devices I don’t recognize, mostly Android (I don’t own any android devices). I haven’t shared my library with anyone, no friends, family or otherwise, ever. I downloaded a copy of the latest logs, changed my password and deleted the unknown user, closed the Plex port on my router and disabled Plex remote access in the server. What else do I need to do to secure my system?

My plex server is on a Windows 10 system. It is the latest version of Plex.

A quick google search turned up a “hired88” Twitter account in Poland.

How could this happen? I’m quite upset since I have home videos of my children and family photos on my plex server and who knows what creeps have been logging in and viewing. The whole thing is just very unsettling.

2
  1. Go to Plex.tv
  2. Change your password immediately. This generates new credentials (your Plex token)
  3. MOST IMPORTANT While there , make certain to disconnect all connected devices
  4. Return to Settings - Server - General
  5. Make sure you were disconnected / signed out… (Remote Access is terminated)
  6. Return to your Settings - Devices tab and start deleting all of them.
  7. After you’re done, then connect back up (sign in) one of your devices with the new password.
3

Ok all that’s been done. Still, how does someone gain access without a password? Is Plex secure?

4

Plex is secure. If you’re using Windows, you have to give your machine a thorough going over for trojans, viruses, other data/keystroke loggers.

5

I only use windows for my plex server - I guess it’s time to move it to linux. Any suggestions for software to detect trojans/keyloggers/etc?

6

You can stay with Windows for your Plex server but make it a dedicated machine and a fresh installation. NO internet browsing on it. “All business”.
I don’t know windows very well.

As for Linux, I’ve been Unix/Linux for 35 years now. It’s not for the faint of heart to learn. For all the GUI which exists, over 75% is still done at the keyboard in a ‘cmd’ window. Unix/Linux was written before we had powerful machines and was designed to be fast and lean at the keyboard. That’s why it makes such a great server.

7

I’ve been using linux at the terminal for a decade and am quite comfortable with it. I only used windows for this install because I also use the machine to host virtual instruments that are windows only.

Thanks for your help.

8

Then go for it.

Put windows in a VM for when you need it.