Log spam after blocking/removing user

[Symen_4ab 8]

Hi there,

I was having an issue where a windows client was sending multiple play/stop events to the server per second. I sent the user a message to try and fix this, but no response.

So, first I tried to block his ip in the Remote IP address field, the logs were now filled with

Quote

2026-07-03 14:04:12.192 Error UserService-0HNMOQEPPSA10:00003081: Forbidden
2026-07-03 14:04:12.192 Info UserService-0HNMOQEPPSA10:00003081: http/1.1 Response 403 to host2. Time: 0ms. GET http://host1:8096/emby/Users/8bd49f0a32b74f48bc0b2e49db866931?X-Emby-Client=Emby Windows&X-Emby-Device-Name=DESKTOP-J34UL42&X-Emby-Device-Id=cc614a24-04dd-f065-34c5-84f2f9ab5e2e&X-Emby-Client-Version=2.310.2.0&X-Emby-Token=x_secret2_x&X-Emby-Language=fr. 

I then tried to remove the block and completely delete the user from the server, the spam changed to 

Quote

2026-07-03 14:06:28.913 Warn UserService-0HNMOQEPPSAKR:00000D6D: AUTH-ERROR: 178.197.223.63 - Access token is invalid or expired. 
2026-07-03 14:06:28.913 Error UserService-0HNMOQEPPSAKR:00000D6D: Access token is invalid or expired. 
2026-07-03 14:06:28.913 Info UserService-0HNMOQEPPSAKR:00000D6D: http/1.1 Response 401 to host2. Time: 0ms. GET http://host1:8096/emby/Users/8bd49f0a32b74f48bc0b2e49db866931?X-Emby-Client=Emby Windows&X-Emby-Device-Name=DESKTOP-J34UL42&X-Emby-Device-Id=cc614a24-04dd-f065-34c5-84f2f9ab5e2e&X-Emby-Client-Version=2.310.2.0&X-Emby-Token=x_secret2_x&X-Emby-Language=fr. 

I'm getting about 50 of these message per second... I'm currently rotating the log every 15 minutes, they are about 25MB in size each, which is not ideal 

I will block his ip upstream when I'm able to (waiting for some hardware), but will it then spam the firewall forever?

Is there a way to stop the server from logging this ? It's been doing this for a bit more than one day now nonstop.

Thanks,