internal or external IP

What would be an easy way to determine if the source IP in some IIS logs on an exchange cas server is that of an internal ip address ie desktop computer of user connected to our private network or an external ip ie personal smartphone or pc when remotely accessing their mail via active sync on their own phone outlook anywhere or owa etc
LVL 3
pma111Asked:
Who is Participating?
 
K BCommented:
External IP addresses can be searched to determine who owns it.
https://www.arin.net/

Search top right "who is"

If the source IP address is that of your internal network range - it is originating from the inside.
2015-04-19-1225.png
If you use RDS or citrix it would be those "access" logs.

Is there more to your question?
0
 
tailoreddigitalCommented:
and if you search for a private/internal address at arin.net,  arin will show you that it's "private" (Name      PRIVATE-ADDRESS-BBLK-RFC1918-IANA-RESERVED"

So either way, search at arin.net and it'll tell you.
0
 
Gerwin Jansen, EE MVETopic Advisor Commented:
Filter out all addresses from the internal IP range(s), what remains is the list you want.

Your IIS log files are on the windows platform so you can use 'findstr' on a command line to filter, like this:

findstr /i /v "<ip pattern>" *.log

For example:

findstr /i /v "10.0.1" *.log
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.