To find the IP address of a user who is logged in to your organization, you can use the audit events. Nearly all of the audit events include the IP address.

For example, you can use the AccessToken audit event. For more information, see the PeoplePermissions section of the Action Catalog in the Developer Center.