Port reference
Port 32400 (TCP) – Plex Media Server
Default HTTP port for Plex Media Server, serving the web app, API, and media streaming to clients.
Quick facts
- Transport
- tcp
- Category
- Registered
- Risk level
- Critical
Actively exploited and high-impact — keep it off the public internet.
Default state
Open on Plex Media Server hosts; often reachable via remote access and sometimes exposed directly to the internet.
What is port 32400 used for?
Port 32400 is the default port for Plex Media Server, the popular software for streaming your own movies, TV, music, and photos to phones, smart TVs, and the Plex apps. The server runs on this port to serve its web interface (app.plex.tv and the local web app), its API, and the actual media streams to your devices at home and, through Plex's remote access, when you're away.
When would you open it?
Plex's built-in remote access can usually punch through your router automatically, so most people never open anything manually. If automatic remote access fails, you can manually forward port 32400 on your router to the machine running Plex so you can stream away from home. Open it only if you actually run a Plex server.
Is it safe to open?
An exposed server can leak your libraries if it isn't kept updated and authenticated, so prefer Plex's relay or a VPN over a direct port forward. See the security notes below.
How to check if this port is open
ss -tulpn | grep :32400
nmap -p 32400 <target>netstat -ano | findstr :32400
Test-NetConnection <host> -Port 32400lsof -i :32400
nmap -p 32400 <target>How to open this port on your router
To reach this service from outside your network, forward the port on your router:
- Open your router's admin page (usually http://192.168.1.1 or http://192.168.0.1) and sign in.
- Find the "Port Forwarding" section — it may be called NAT, Virtual Server, or Applications & Gaming.
- Add a rule forwarding external port 32400 to your device's local IP, internal port 32400, protocol TCP.
- Save and reboot the router if prompted, then test the port from outside your network.
Only forward ports you understand — it exposes that device to the public internet. For remote admin access, a VPN is safer than forwarding the port.
Allow this port through the firewall
sudo ufw allow 32400/tcpsudo firewall-cmd --permanent --add-port=32400/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 32400 -j ACCEPTNew-NetFirewallRule -DisplayName "Allow 32400" -Direction Inbound -Protocol TCP -LocalPort 32400 -Action AllowSecurity & risks
Common attacks
- Unauthorized access to exposed media libraries and the web API
- Account/token abuse to reach a server without local credentials
- Exploitation of past Plex vulnerabilities (SSRF, UDP amplification)
- Scanning and indexing of internet-exposed Plex servers
Hardening
- Keep Plex Media Server updated to patch known vulnerabilities
- Require Plex authentication and disable insecure/anonymous access
- Avoid direct internet exposure; use Plex relay or a VPN
- Disable the GDM/DLNA discovery services if unused
- Run Plex as an unprivileged user and restrict library file permissions
How to block this port
sudo ufw deny 32400/tcpsudo firewall-cmd --permanent --remove-port=32400/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 32400 -j DROPNew-NetFirewallRule -DisplayName "Block 32400" -Direction Inbound -Protocol TCP -LocalPort 32400 -Action Blocknmap snippet
nmap -p32400 --script http-title <target>Replace <target> with the host or range you're authorized to scan.
Related ports
Frequently asked questions
- Should I expose port 32400 to the internet?
- Prefer not to. Plex's remote access and relay handle external streaming without opening 32400 directly. If you must, keep the server fully patched and require Plex account authentication, since exposed servers are scanned and indexed.
- Has Plex had security vulnerabilities?
- Yes. Plex Media Server has had issues including a UDP amplification vector and SSRF/path traversal flaws (e.g. CVE-2020-5740). Keeping the server updated is the single most important mitigation.