I keeps seeing intermittent notifications "-ME- used a new device to access -MY SERVER-:Safari"

I keeps seeing intermittent notifications “-ME- used a new device to access -MY SERVER-:Safari” on my phone. This started happening a few weeks ago. I have no Safari devices and there’s no mention of a Safari device in the Authorized devices list in settings, all the devices on the list are valid.

Any ideas what this could be?

Is Apple protecting you from yourself by randomizing your MAC addresses ?
(it does in my iPhone and I had to turn it off)… Think they call it “Private Network Address” now (?)

If that’s not the case.

Check your account – Change your password – SIGN OUT ALL DEVICES

Then restart and sign them all back in again.

That is kind of the point, I don’t own any Apple devices therefore there’s no way for me to be using Safari.

All the more reason to change your password.

Choosing the sign out all devices option will force sign out the device using Safari. It will not be able to access your server in the future since you’ve changed your password.

Then restart Plex Media Server.

You will have to re-claim your server after changing your account password.

https://support.plex.tv/articles/account-requires-password-reset/

I still don’t understand how signing out all non-apple devices will sign out a Safari device which is not on the list.
I’ll do that to test if it fixes the problem, but it still seems very suspicious that i keep seeing notifications for a device that is not listed anywhere. Either there’s an issue with the authorized devices list, or with the access notifications, or worse someone who has backend access (plex employee? ) is meddling with my server…

You need to change your password and sign out ALL devices.
You haven’t acted on this message which should have reached you per email: Important notice of a potential data breach 24th of August 2022

There is potentially a bug we are looking if where is someone accesses the web app at
https://public.pms.ip.address:port/web.index.html ( replacing with your info) that the server might be sending the notification even if the person accessing local web app does not actually sign in.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.