Auth Log

This screen records sign-in attempts, successful and failed alike.

Columns

Column	Description
Username	The account the sign-in was attempted on
IP	The address it came from
Time	When
Success	Whether it worked
Message	What the outcome was

The filter panel searches by username, IP, message and a date range.

The IP column answers two questions at once

Repeated failures on one account from many addresses mean somebody is guessing a password. The reverse is informative too: if one user keeps failing from a single address, the problem may not be the password but the IP filter.

The reason for a failure is in the message

For a row with Success unticked, Message says why: a wrong password, a disabled account, a blocked address, or an OTP that could not be sent to an unconfirmed number. Issuing a new password without knowing which usually does not fix it.

Related

• IP Filter — restricting by address
• Users — accounts and their sign-in method