I just opened my shopify account and just found out I have unknown IP addresses that has recently accessed my store. Is anyone here has similar issues and how do I address this issue?
Topic summary
Unknown IP addresses are appearing in a new Shopify account’s access logs, prompting concerns about unauthorized logins.
No unauthorized changes have been observed. The owner has enabled two-step authentication and followed Shopify’s security best-practice steps.
Support states the account should be secure if no changes are detected and security steps are in place. Shopify cannot investigate specific IP addresses on their end.
Suggested checks: confirm whether a proxy/VPN was used or recent travel occurred, as these can cause unfamiliar IPs; optionally use a third-party IP geolocation tool (IPligence), which Shopify does not endorse.
The owner confirms they are the sole user, leaving the origin of the IPs uncertain.
Actions/outcomes:
- Security measures implemented (two-step authentication; account hardening).
- Monitor for new logins and changes.
- If desired, look up IP locations and verify no proxy/VPN use.
Key terms: two-step authentication (extra code required to log in); proxy/VPN (routes traffic through different IPs, which can appear unknown).
Status: unresolved; investigation continues by the owner, and support cannot trace IPs.
Hi, @Anonymous . I’m happy to help you out with this! Have you noticed any unauthorized changes to your account since these logins started or is it just the logins in general that have you concerned? I’m just asking to make sure we take all the right steps to help you with this.
If you are noticing that your account has been accessed by devices you don’t recognize it’s best to be safe and take steps to secure your account. You can find a list of steps to take to secure your account on this page. If you haven’t yet, I also recommend you set up two-step authentication to prevent unauthorized logins in the future. You can find more information about two-step authentication here.
Please let me know if you have any questions! This guide on account security best practices can help in the meantime as well.
Hi Erin,
Thank you for your reply. I haven’t notice any changes to my account but seeing the IP access coming from somewhere else other than my computer is quite worrying.
I have setup a two-step authentication already. And did the steps as much as I could to secure the account.
Is it possible for shopify to check where are these IP addresses coming from?
Thank you
Hi, @Anonymous . Thanks for your reply!
I can definitely understand why you would be worried. That being said, if you haven’t noticed any changes to your account and you’ve taken the steps I shared to secure your account, your account should be secure now and you shouldn’t be seeing more of this.
We wouldn’t be able to look into these IP addresses on our end, but I can share some information that can help you look into this. To start, I’d double check if you, or any staff members you may have, are using a proxy or were travelling, as this can sometimes explain unknown IP addresses. There are also third party websites that can help you track down IP addresses. For example, IPligence. We don’t support this website ourselves, but it can help you if you’d like to look into this further on your end.
Let me know if you have any questions about this!
Hi Erin, thanks for replying. I was the only user and no one else has access.