I had this happen starting in late march. I went through every network setting on Plex and in my Sophos UTM multiple times yet I kept seeing "local" users within PlexPy on platforms that I did not recognize playing things that I was not watching. Using an external connection, I pulled up my ip on port 32400 (http://xxx.xxx.xxx.xxx:32400) in a browser and noticed it was displaying an XML file. Now, this should not be displayed without authentication. I attempted to add the registry entry DisableRemoteSecurity set to 0 and restart the Plex server but this had no effect. Finally, I went to add/remove programs selected change, then repair. It prompted me to select the installer package, I used version 0.9.16.6 (Plex Pass) and upon reboot it was no longer displaying the XML file but a 401 unauthorized message from the external connection. I have not seen any of these "local" users since. So it appears that somewhere along the line, one of the updates changed the authentication settings and were allowing unauthenticated users to connect.
↧