Why does the cpanel 'last login from' IP address not match mine?

Avatar
jdgrimes
  • updated
  • Answered

I just happened to notice that the last login IP address in cpanel was 70.39.232.170, which is not my IP address (207.53....). I don't think that it's a malicious address from a hacker, but I just wanted to make sure. I know that the shared server I am on has an IP starting with 70.39... so I figure it probably has something to do with maintenance or something like that... I just didn't want to take any chances, so I thought that I should ask here if this is malicious or not.

Replies 3
Avatar
0
anonymous
Quote from prestonmcafee

I see LAST LOGIN IP ADDRESS = 52.186.90.168, which whois says is owned by Microsoft, not Inmotionhosting.

Hi, Preston! It's most likely that it is either a service from a Microsoft product, or some type of web app that uses Microsoft. Have you set up any mail clients, VPNs, web apps, or anything else that would be connecting to your cPanel that you know of? Certain mobile devices can also connect from seemingly unusual IPs if you use your mobile provider's data and not your home or office wifi.  If not, you can always update your cPanel password and submit a verified ticket and ask our Support Team to run a scan for you to be safe.

Avatar
0
prestonmcafee

I see LAST LOGIN IP ADDRESS = 52.186.90.168, which whois says is owned by Microsoft, not Inmotionhosting.

Avatar
2
Scott
Hello Jdgrimes,

Good question! It is always best to be safe. Most people do not catch that. That IP address is the IP of secure1.inmotionhosting.com, which is the Account Management Panel. Your IP will show up if you sign in directly with yourdomain.com/cpanel.

I hope this answers your question. If you have any more questions or information specific to the issue please leave a comment below so we can further assist you.

Best Regards,
Scott M