Who enters your account: sessions, accesses and blocks by IP

What you get: see who has your panel open right now, review the last accesses and log out anyone who shouldn’t be there.

Before starting

There are two screens and they do different things:

Sessions — who has the panel open and the access history.
IP access - blocked addresses, whitelist and security events of your account.

Both are on the menu, under Account.

See who has the panel open

Account → Sessions menu.
Up there you have the numbers: open sessions, accesses from the last 24 hours, failures and from how many different addresses.
The table says user, IP, browser, system, device, when it entered and when was the last activity. Yours is marked as This session.
To kick someone out, enter Sign out in their row. You will have to log in again with your password.

Review the accesses

On the same screen, Sign-in history. You can filter by result: OK, Failed or Blocked.

What you have to look at is not the number of failures - everyone has that, they are robots testing - but whether there is any OK that you do not recognize: at a strange time, from an IP that is not yours. That is a sign.

Automatic locks

The panel only blocks those who fail several times in a row. In IP access you see the configuration in use: how many attempts before blocking, in which time window and how long the block lasts.

How to check it worked

If you have closed a session, refresh the screen: it must have disappeared from the list. If you really suspect that someone has entered, close all sessions except yours, change the password and activate two-step verification (Two-step verification). In that order.

Common problems

I see my own session repeated several times: Each browser and each device opens its own, and the old ones take time to expire. If you recognize the browsers and the IPs, it’s normal.
“Your own session cannot be closed from here”: To log out yourself, use “Log out” in your user menu. This screen is to close others’ screens.
I see many failed accesses that are not mine: They are robots trying passwords and it happens to everyone who is on the internet. Automatic blocking already cuts them off. What really makes them harmless is the two-step verification.
I’ve been blocked myself: Wait for the duration of the block to pass, which appears in the settings in use, or log in from another network. If you are in a hurry, write to us.
I want to block a specific IP address: The IP blocking applies to the entire panel and all customers, so we handle it ourselves. Ask for it by ticket with the address and reason.
I want my IP address to never be blocked: The same: we manage the whitelist ourselves. Write to us with your address. Be careful, if your operator changes it every now and then, this won’t help you much.
I see an alert that the platform blocks countries: It is a global block we have and you do not configure it. If what you want is to filter your website by countries, that is yours: Block your website by countries.
I do not recognize a correct access: Close that session now, change the password and activate two-step verification. Then write to us with the date and IP address so we can look at it.