Server Version#:1.27.2.5929
Player Version#:
I received an email to inform me of a new login from an ip address in st helens, uk, but i am in Scotland so i clicked the link and changed my password, i then noticed a new managed user, so deleted this, then noticed another email, same as the first, so changed my password again, it happened again, then i noticed i hadn’t set up 2fa, so i did this and reset the password, this was all between 11:30 - 13:45 yesterday, but i just noticed another email detailing a login from st helens uk, different ip address at 19:11 last night, just noticed it this morning, so i have shut down the server, is there anything else i can do?
Plex Media Server Logs_2022-07-09_08-13-16.zip (5.9 MB)
Plex Media Server Logs_2022-07-08_14-08-03.zip (6.2 MB)
Your server is not hacked. Looking at the log of your account, it is apparent that the IP which is supposedly located at St. Helens is associated with your own activity.
Geo-location via the IP address is very imprecise. It relies on a database which has stored the geographic location of an IP address. However, this location can change – sometimes rapidly. A 100% accurate geo-location is pretty much impossible via this method.
Perhaps the database which Plex uses to look up the location of an IP is outdated.
Perhaps your ISP has bought an IP address block from another provider which services the area of St. Helens.
Perhaps you have an active VPN which makes your IP appear to be from around the area of St. Helens.
Perhaps your own ISP has a service agreement with another ISP which services the area of St. Helens, so that the data packets from your internet connection are routed through the same systems.
Thanks for the info, at least i can relax now.
