This is a big problem with Vix in my opinion, yet on my own I seem to be getting ignored... Obviously people are scanning for streams on 8001 and automatically connecting. Vix comes with an unchangeable port and non working security which in my opinion needs sorting urgently.
Have a read of my thread here:
Stream HTTP authentication not working / unable to change stream port?
birdman has suggested turning HTTP stream authentication on, and creating another account (non root) and that appears to work for him, so it might be worth trying that.
Authentication for streaming does not work, and there should be an easy way to change the streaming port.
Depending on your router model, you might be best blocking access to 8001 and 8002 until you require it.
I have blocked the IP addresses that were connecting to my box from someone in Germany, by using a firewall script on my router, and leave HTTP authentication on until I want to stream from my box, when I have to turn it off before it works.
1. How can you tell if someone is connecting to your box.
Log into your router and view the open connections, specifically anything connecting on port 8001 or 8002 if your box transcodes. Also if you have a twin tuner box, keep an eye out for "No free tuner" messages while your recording 1 channel and try changing to another - meaning there is a tuner a tied up for no known reason. Check your internet upload speed and see if it is unusually slow.
2. What causes the box to be open to the outside.
It is open as default in Vix with no security.
To the outside world, streaming is probably blocked by your router's firewall. The problem appears when you forward and open the port on the internet. That lets you connect remotely but also allows everyone else, so the best (and apparently the only) option at the moment is to look at your routers security settings (only allow certain IP addresses through the firewall, or allow all but certain blocked ones.) Makes if very awkward with mobile internet with a different IP address every 5 minutes. I turn on HTTP authentication from within Vix (Setup -> System -> Customise -> Require authentication for HTTP streams) which does not work, but it disables streaming - at least until you need it, then you can turn it back off.