cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1660
Views
0
Helpful
1
Replies

Is there an easy way to search for an IP address

jeffaie
Level 1
Level 1

Being part of a government entity we have been asked to identify an individual by their IP address at the time. There are no indications in any of our logs that would indicate such information. I am wondering if I could search the duo logs for a specific IP address that a duo request could have come from. Is this possible?

1 Reply 1

Amy2
Level 5
Level 5

Hi there, and welcome to the Duo Community. I recommend taking a look at our Guide to reading the Authentication Log report in the Duo Admin Panel. If it is available, the IP address of the device used to access the Duo-protected application will appear in the Access Device column.

You should be able to accomplish this using the Duo Admin API (read more here), but I’m not sure. Perhaps some folks in the Admin API category of the community can help you out if you need guidance.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links