Skip to main content

Last Login IP From

James Hall
Hello Everyone :) I am wondering if anyone else is seeing this IP address [Removed] under "last login" when you login to cPanel? It is not my IP, has never been my IP, and it won't update or change for the last month or two. Out of 9 separate hosting accounts (unrelated logins and IP's) 3 of them are showing this as the last IP logged in. I can logout and back in quickly and the IP address still shows the last login was [Removed]? Thanks, Jim

Comments

9 comments

Date Votes
  • cPanelMichael
    Hi Jim,
    I can logout and back in quickly and the IP address still shows the last login was [Removed]?

    The IP address that appears for "Last Login" is not the currently-authenticated IP address. For example, if you log in via the 10.1.1.1 IP address, and then log in multiple times via the 10.2.2.2 IP address, the interface will display 10.1.1.1 as the Last Login IP address. It will not display 10.2.2.2 as the Last Login IP address until you log in via a different IP address. As far as the source of that IP address, you may want to contact your provider to see if this is an IP address used by their support team. Thank you.
    0
  • James Hall
    Hi Michael, It used to display my IP address for years. I've never had that IP address and since it is happening on 3 UNRELATED different hosting accounts that have totally unique usernames and 12 character passwords, I think something else is at play. How can it show an IP address as the "last login" unless they logged in from that IP address? Since my servers have brute force protection enabled (5 failures and a 30 wait) and I use firewall plugins on my sites I find this very strange. The IP has been reported as a possible source of SQL injection here: [Removed - No need to post the actual IP address here] Jim
    0
  • cPanelMichael
    Hi Jim, It doesn't mean the IP address in-question didn't access cPanel. That is in-fact something you should investigate to determine if the accounts were accessed by an unauthorized user. I was answering your question about why the "Last Login" IP address did not change after you logged out and then logged in again. That's normal behavior, and described in more detail on the following post: cPanel Control Panel "Last Login" clarification As far as the offending IP address itself, you may want to review /usr/local/cpanel/logs/access_log to get a better idea of when that IP addressed accessed cPanel and what actions it performed. Thank you.
    0
  • sbutler
    I have the same issue. I logged in from Business AT&T network it updated. I logged in on Suddenlink/optimum network and no update last login ip. This last login ip is for users to know if anyone else has logged into their cPanel account. Years ago it worked perfectly. Unfortunately it is broken. This is and has been an ongoing issue. This is also a security issue when you don't know your password has been compromised. The other question is why has it been broken in the first place. I would think because of the login as feature different user maybe so cPanel user is not aware they are being monitored or setup for something.
    0
  • sbutler
    I looked and found the last line show my login but the one before last is showing up in cPanel. Looks like when they updated it they forgot that on lynx the number 0 is the first number and number 1 would be the second number.
    0
  • cPRex Jurassic Moderator
    @sbutler - I'm not seeing an issue with the feature on the right-hand side of the page in the Jupiter theme. When I access the interface it shows the correct IP of the last access. Can you let me know specifically which area of the system you are checking where you are seeing this not working?
    0
  • sbutler
    @sbutler - I'm not seeing an issue with the feature on the right-hand side of the page in the Jupiter theme. When I access the interface it shows the correct IP of the last access. Can you let me know specifically which area of the system you are checking where you are seeing this not working?

    I have confirmed it. Today I logged in to cPanel at work and when I logged in it did show the last login ip address like it was supposed to do. I just logged in and it worked again. I logged out and then back in and it did not change to my address here were I just logged in.
    0
  • sbutler
    after I log on in the right column. I have had it stop changing all together as stopped working. I have recently did a transfer from one server to the one I am on now. This feature is supposed to show you the last ip logged in. the ip's are supposed to keep moving up the list but if the last ip logs back in it does not update as it should. This is in users home directory /home/%user%/.lastlogin file. This some how can break auto changing the logged ip address within time. I can remember it would work then it would stop working and get stuck on one ip address never updating again.
    0
  • cPRex Jurassic Moderator
    Thanks for the additional details. Please submit a ticket to our support team so we can see this in action and we'll help get it resolved!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post