# Store more than one IP address per user

**URL:** https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155
**Category:** Feature
**Created:** [January 18, 2015, 9:20pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155 "2015-01-18T21:20:20Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![DeanMarkTaylor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/deanmarktaylor/32/102462_2.png) [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [January 18, 2015, 9:20pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/1 "2015-01-18T21:20:20Z")

</div>

Log more than just a single last used IP address for a user

My request would be for **`3` or more** IP Addresses

Generally I find that users are logging in simultaneously from multiple devices including:

- Home Desktop
- Home Tablet
- Mobile Phone
- Work Computer

A single IP is a bit pointless - whilst the two home connections may appear to be from the same IP address I usually find that the Mobile phone connects over 3G and work computer another IP.

This helps deal with systems administration, multiple accounts issues, debugging error reports found in logs and other usual items where IP address is used.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [January 18, 2015, 9:35pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/2 "2015-01-18T21:35:01Z")

</div>

> [@DeanMarkTaylor](#):
>
> Log more than just a single last used IP address for a user

Currently there are **2** IPs that get logged

- Registration IP
- Last used IP

In my experience with vB it was usually the Registration IP that was more helpful in spotting and identifying problem accounts.  
But there have been a lot of times where knowing the Posting IP was helpful.

Because Last IP can be transient, you _do_ have to be a lot quicker if you’re wanting to use it.

---

<div class="post-metadata">

### Author: ![DeanMarkTaylor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/deanmarktaylor/32/102462_2.png) [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [January 18, 2015, 9:44pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/3 "2015-01-18T21:44:04Z")

</div>

In most of my installations an external SSO handles the account creation - thus we don’t have a “Registration IP” in Discourse.

So the more IP’s stored the better directly against the users account.

I know it might be a pain to implement but a date next to each IP used would also aid systems administration.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [January 27, 2015, 3:18am UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/4 "2015-01-27T03:18:48Z")

</div>

Sure long term we should store ip addresses of all logged on sessions and allow admins to log off particular sessions selectively or get info about them.

---

<div class="post-metadata">

### Author: ![cmwebdev](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cmwebdev/32/122368_2.png) [@cmwebdev](https://meta.discourse.org/u/cmwebdev)
#### Post date: [May 30, 2018, 10:13pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/5 "2018-05-30T22:13:57Z")

</div>

Is Discourse still only storing the two IP’s per user?

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [May 30, 2018, 10:22pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/6 "2018-05-30T22:22:06Z")

</div>

The actual storage has been complete for quite a long time. We have some plans to expose more of this information to admins/users probably in 2.1

In particular admins want to know:

1. List of users that are “suspicious” cause they are logged in from both Bangladesh and USA at the same time.

2. View where a user is logged in from at the moment and allow admins to invalidate specific sessions

3. Allow end users to see where they are logged in from and a log of all of the times they logged in/out including access to own IP.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 30, 2018, 10:24pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/7 "2018-05-30T22:24:20Z")

</div>

It’s pretty common on major sites for them to enter “freak out mode” when a user suddenly logs in from a very different IP address than they usually do, from a country halfway across the world.

 ![image](https://global.discourse-cdn.com/meta/original/3X/1/c/1c5a1f0739050a0940b569ee0ffa71f019c7be23.png)

This feature kinda sucks when you go on vacation, but I see why they do it.

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [October 8, 2018, 5:22pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/9 "2018-10-08T17:22:01Z")

</div>

FTR, this is being worked on in

[https://github.com/discourse/discourse/pull/6335](https://github.com/discourse/discourse/pull/6335)

---

<div class="post-metadata">

### Author: ![lqiz5bso7g](https://avatars.discourse-cdn.com/v4/letter/l/43a26b/32.png) [@lqiz5bso7g](https://meta.discourse.org/u/lqiz5bso7g)
#### Post date: [October 9, 2018, 6:19am UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/10 "2018-10-09T06:19:43Z")

</div>

Is it actually possible to not log IP info if I’m interested in running a privacy minded forum?

Thank you.

---

<div class="post-metadata">

### Author: ![nbianca](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nbianca/32/157984_2.png) [@nbianca](https://meta.discourse.org/u/nbianca)
#### Post date: [November 3, 2018, 4:00pm UTC](https://meta.discourse.org/t/store-more-than-one-ip-address-per-user/24155/11 "2018-11-03T16:00:03Z")

</div>

This topic was automatically closed after 4 days. New replies are no longer allowed.
