While retrieving audit events from activities.list() in Google Apps Admin SDK, some activities have their ipAddress field as 0.1.0.40 and 0.1.0.0. In what cases could this be the source IP address, since they seem to be private or restricted IP addresses?
{
"kind": "admin#reports#activities",
"etag": "\"6KGrH_UY2JDZNpgjPKUOF8yJF1A/l6ZMtXXRXWtSeG8M3t2g4k5pUaY\"",
"items": [
{
"kind": "admin#reports#activity",
"id": {
"time": "2016-12-28T11:23:26.269Z",
"uniqueQualifier": "2877532833757184598",
"applicationName": "drive",
"customerId": "C01c818ge"
},
"etag": "\"6KGrH_UY2JDZNpgjPKUOF8yJF1A/7lASgpMTSWwMHfLg8I4-s07wD_Q\"",
"actor": {
"email": "def@abc.com",
"profileId": "115227377397945077346"
},
"ipAddress": "0.1.0.40",
"events": [
{
"type": "access",
"name": "create",
"parameters": [
{
"name": "primary_event",
"boolValue": true
},
{
"name": "owner",
"value": "def@abc.com"
},
{
"name": "doc_id",
"value": "0ByoIcq_NoMgZDY19wc2RnZE0"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "Untitled"
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
}
]
}
]
}