IP adress in User list

[BalthazarBux 19]

I maybe dreaming, but wasnt IP in the list of details before when looking Users as admin?

Cant find it.

[GrimReaper 5004]

7 hours ago, BalthazarBux said:

I maybe dreaming, but wasnt IP in the list of details before when looking Users as admin?

Not that I know of. 

You can use Playback Reporting plugin for that purpose (note that plugin tracks only from the time of installation onwards). 

[Luke 42578]

Hi, on what screen exactly?

[CFC 26]

17 hours ago, BalthazarBux said:

I maybe dreaming, but wasnt IP in the list of details before when looking Users as admin?

Cant find it.

I know the user IP show in the Activity section when they authenticate. It also shows when they are actively playing media in the Now Playing section

CFC

[BalthazarBux 19]

Maybe it was there I have seen it.

I had a weird login attempt, I could see from what IP, was trying to see if any of the users last login was from the same IP, if they did a faulty login attempt or if it was from a "hacking attempt". 

Last login ip maybe can be added in the users section, i was choosing the table view.

[Luke 42578]

You can see it on the devices screen if you enable that field.

[RanmaCanada 544]

9 hours ago, BalthazarBux said:

Maybe it was there I have seen it.

I had a weird login attempt, I could see from what IP, was trying to see if any of the users last login was from the same IP, if they did a faulty login attempt or if it was from a "hacking attempt". 

Last login ip maybe can be added in the users section, i was choosing the table view.

You should be able to click on the failed attempt from the admin dashboard and it will show you their IP. I had someone from China attempt to use "guest" to log into my server on the 14th. I do not advertise my server so I am not certain how they found it. I also have a dynamic IP that changes every single time my router reboots. All my family and friends use Emby Connect to connect so this has me alarmed.

 

[BalthazarBux 19]

6 minutes ago, RanmaCanada said:

You should be able to click on the failed attempt from the admin dashboard and it will show you their IP. I had someone from China attempt to use "guest" to log into my server on the 14th. I do not advertise my server so I am not certain how they found it. I also have a dynamic IP that changes every single time my router reboots. All my family and friends use Emby Connect to connect so this has me alarmed.

 

That was the exact same I had.

 

And I also have a very private server, weird.

Edited yesterday at 12:59 AM by BalthazarBux

[RanmaCanada 544]

@LukeWhat in the ever loving..

Anyone else have this IP attempt to login to their server?

I think we might have another problem. Possible it's an AI bot checking IP addresses? Or is it possible someone has been downloading the logs from the forums and creating a database of our servers?
 

Edited yesterday at 03:17 AM by RanmaCanada

[visproduction 361]

FYI:
112.96.58.9 ChinaShenzhen, Guangdong

I would guess typical bot attack aimed at sequential IP addresses, not necessarily targeted to just yours.  If you pull a router log, I would see perhaps 30 such attempts daily in the US, many from China.

[js28194 53]

Chiming in here.... I do vaguely remember when my remote users logged in, it did log their IP Address and was displayed, and I don't see that anymore.  Believe it was in the activity log.  But Meh, I don't really care since my firewall is pretty solid and bot blocking at the caddy level returns them a 404 or 444 so they eventually drop the IP space in their bot scanning activity. I can't remember and don't really care anymore.

Dnsmasq & Diversion at my router level have been more than adequate.  Most stuff never get's to the caddy level.