: Dozens of private IP addresses in Google Analytics I was reviewing my Analytics for the past year and noticed a couple dozen different IP addresses showing up as referrals. I tracked a few
I was reviewing my Analytics for the past year and noticed a couple dozen different IP addresses showing up as referrals. I tracked a few of them down to be Google (why are Google IP addresses coming in as referrals?), but there are still quite a handful that come from "private" IP addresses:
10.x.x.x
192.x.x.x
172.x.x.x
for the 10.x.x.x range of IP addresses, they are all using Port 15871 which I found interesting. I have the company IP address blocked from Analytics, so it shouldn't be any internal visits. Any clue what's going on here?
More posts by @Alves908
3 Comments
Sorted by latest first Latest Oldest Best
As indicated in this Google Product Forums answer, Google Analytic servers cannot see private IP addresses.
It's quite possible that these are spoofed IP addresses. Port 15871 by the way is commonly used by Websense's Web Security and Web Filter, which they may be attempting to exploit.
To exclude internal IP addresses from appearing in your reports, follow the instructions from this Google Analytics Help article:
Create a custom filter to exclude a specific IP address or a range of IP addresses.
Filter Type: Custom > Exclude
Filter Field: Visitor IP Address
Filter Pattern:
For example, if the single IP address is 176.168.1.1, then enter
176.168.1.1.
For example, if the range of IP addresses is 176.168.1.1-25 and
10.0.0.1-14, then enter ^176.168.1.([1-9]|1[0-9]|2[0-5])$|^10.0.0.([1-9]|1[0-4])$
Remember to use regular expressions to enter an IP address.
You can also use or modify the regex of the code found here.
Referrers are just an information the browser sends to the site and you can't rely on them being accurate. So there could be many reasons for that:
maybe some people are using RSS readers or webmails running in there local networks and linking to your site
people could just be faking their referrers because they don't want to send the real ones
development instances of your site running in a local network an linking to your real site
In general, this kind of referrals refers to this situation: when a developer is working on local on a new version of a site, if he clicks on absolute link on a page (when testing), he is redirected to a page which is online. That's why the script of Google Analytics gets this kind of IP address as referrals.
Terms of Use Create Support ticket Your support tickets Stock Market News! © vmapp.org2024 All Rights reserved.