I recently started tracking my watched stats with PlexPy, and there's loads of users able to login and watch films on my server - none of whom I've authorised. A few are showing up in the stats (or in the plex activity page) as being "local" with no username, and for others they're "local" but with what appear to be login details. I should mention that I'm using a cloud VPN service, so "local" could be anyone sharing my IP or I guess potentially anyone on the same VPN service.
Some of the usernames sound like the names of services that are designed for this purpose (like RoboPlex and then 4 numbers) and a few all seem to have the number 1888 in them.
I've had a look through the server and user settings and I can't see anything for allow "any" local users, and I've disabled guest access.
Firstly has anyone else seen this? Secondly, would logs/screenshots/anything be of any use? Thirdly, how do I stop this??
Thanks