Log in to to mysql or php go to mag devices and execute this query.

It will display all mag devices with more than 1 ip used from user activity ( you must have enabled logs for this to work correctly)

For example if someone pulled illegal m3u...