0

While retrieving audit events from activities.list() in Google Apps Admin SDK, some activities have their ipAddress field as 0.1.0.40 and 0.1.0.0. In what cases could this be the source IP address, since they seem to be private or restricted IP addresses?

 {
  "kind": "admin#reports#activities",
  "etag": "\"6KGrH_UY2JDZNpgjPKUOF8yJF1A/l6ZMtXXRXWtSeG8M3t2g4k5pUaY\"",
  "items": [
    {
      "kind": "admin#reports#activity",
      "id": {
        "time": "2016-12-28T11:23:26.269Z",
        "uniqueQualifier": "2877532833757184598",
        "applicationName": "drive",
        "customerId": "C01c818ge"
      },
       "etag": "\"6KGrH_UY2JDZNpgjPKUOF8yJF1A/7lASgpMTSWwMHfLg8I4-s07wD_Q\"",
      "actor": {
        "email": "def@abc.com",
        "profileId": "115227377397945077346"
      },
      "ipAddress": "0.1.0.40",
      "events": [
        {
          "type": "access",
          "name": "create",
          "parameters": [
            {
              "name": "primary_event",
              "boolValue": true
            },
            {
              "name": "owner",
              "value": "def@abc.com"
            },
            {
              "name": "doc_id",
              "value": "0ByoIcq_NoMgZDY19wc2RnZE0"
            },
            {
              "name": "doc_type",
              "value": "unknown"
            },
            {
              "name": "doc_title",
              "value": "Untitled"
            },
            {
              "name": "owner_is_team_drive",
              "boolValue": false
            }
          ]
        }
      ]
    }
  ]
}
Cœur
  • 37,241
  • 25
  • 195
  • 267
Jesna James
  • 75
  • 1
  • 8

1 Answers1

0

From this documentation, it is stated here that the "ipAddress" properties contains the user's IP address. And from this Activities: list, it contains IP address of the user doing the action. This is the Internet Protocol (IP) address of the user when logging into G Suite which may or may not reflect the user's physical location. For example, the IP address can be the user's proxy server's address or a virtual private network (VPN) address. The API supports IPv4 and IPv6.

KENdi
  • 7,576
  • 2
  • 16
  • 31