LoggedLAN IPs in DB 1

[MarkZK]

Hi all,

I've just checked my SQL DB and have noticed several LAN I.P addresses in there, I'm using ASP ....

Request.ServerVariables("remote_addr")

...to get the I.P of the user to put it into the DB log, the question is, has anyone seen this odd behaviour before ? and how are LAN I.Ps even able to get into the DB ?.

I'm wondering if it's to do with the server or maybe even the ISP ?.... all seems very strange to me.

Thanks !

 

[KirbyWallace]

If you hit the application from "inside" (ie, on your lan) and you have a switch that is "intelligent" and can do NAT'ing, it will route your call to "

http://www.yourdomain.com"

along the local intranet to the application rather than going out onto the internet and coming back in from the outside.

The lan IPs are either local lan users who are hiting the application from "inside", or, in some cases (depending on if the router is configured to act as a router or a gateway), the lan IP may be the IP address of the switch or router.

 

[MarkZK]

Hi Kirby,

Thanks for the reply, the router does have the NAT settings changed so that it'll bounce back to the I.P address of the server (which then uses host headers IIS).

I'm 99.9% sure that the users aren't locally hitting the app from the inside, the thing that is really getting me is that it's not just one I.P and it's never the routers I.P (10.0.0.138), in fact to make it more annoying I've even noticed the local host I.P (127.0.0.1) getting logged by different users. How do I know the users are different ?, well I'm assuming this based on other data, like many different user agents, browsers, operating systems, referrals, flash version and so on.

here's some I.Ps that have been logged.


127.0.0.1
10.182.0.33
192.168.0.14
172.17.18.8
192.168.100.21

...and way too many more...

with that extra info, do you still think this is router related, Kirby ?, if so I'll find a different forum.

Thanks again !.

 

[KirbyWallace]

I'd recommend posting this in a networking forum. Maybe they can explain this behaviour. I take it this is a very large company. That would explain all the different private IP address ranges - they're all over the place!

Kirby

 

[MarkZK]

Thanks, Kirby, I'll try asking around on the networking front and stop bugging the ASPers now :-D.