How can I find the source of an intruding media server?
It's impossible to find anything if you don't know exactly where to look for and what to look about it. There is an application called GFI Languard. It helps you display everything about computers in your network. You can use it to detect computers that are acting like the servers.
Download a trial copy using: http://languard.gfi.com/