Strange login to my account

evfrson · 26 Dec 2016, 01:21 AM

I have just been looking at the list of logins to my account and all look ok except for one.
It is from a host called lb03.runbox.com and has IP addr 10.9.9.193.
Presumably it is internal to Runbox but I would like to know what it is and why it logged into my account.

Geir · 26 Dec 2016, 01:34 AM

It's an internal IP address as some services still don't show the external/remote IP.

In other words, it's a remote request that is not showing the IP address correctly yet.

We are working to correct this.

- Geir

evfrson · 26 Dec 2016, 01:42 AM

What remote request would this have been then ?

Geir · 27 Dec 2016, 06:01 AM

Most likely your own. If you suspect otherwise, please contact Runbox Support and we can investigate our server logs for you.

- Geir

evfrson · 27 Dec 2016, 04:42 PM

Thanks Geir I will raise a ticket.
I always use webmail and have never seen a session like that before.

Geir · 28 Dec 2016, 07:11 AM

lb03.runbox.com is one of our web server load balancers.

- Geir

evfrson · 28 Dec 2016, 05:12 PM

So when I logged in to webmail, it was via this load balancer and the session was recorded as being a login from this rather than from my ip ?

kservik · 29 Dec 2016, 01:25 PM

Yes. We have changed our load balancing infrastructure recently and we have also added a facility to move over a list of users in groups (beta testers for 2FA and more) to land on the new infrastructure that uses 2FA.

That is why you see changes in how things are recorded in your logins.

Kim

evfrson · 29 Dec 2016, 07:14 PM

Thanks for your replies Kim & Geir.

26 Dec 2016, 01:21 AM	#1
evfrson Junior Member Join Date: Oct 2015 Posts: 9	Strange login to my account I have just been looking at the list of logins to my account and all look ok except for one. It is from a host called lb03.runbox.com and has IP addr 10.9.9.193. Presumably it is internal to Runbox but I would like to know what it is and why it logged into my account.

26 Dec 2016, 01:34 AM	#2
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,918 Representative of: Runbox.com	It's an internal IP address as some services still don't show the external/remote IP. In other words, it's a remote request that is not showing the IP address correctly yet. We are working to correct this. - Geir

26 Dec 2016, 01:42 AM	#3
evfrson Junior Member Join Date: Oct 2015 Posts: 9	What remote request would this have been then ?

27 Dec 2016, 06:01 AM	#4
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,918 Representative of: Runbox.com	Most likely your own. If you suspect otherwise, please contact Runbox Support and we can investigate our server logs for you. - Geir

27 Dec 2016, 04:42 PM	#5
evfrson Junior Member Join Date: Oct 2015 Posts: 9	Thanks Geir I will raise a ticket. I always use webmail and have never seen a session like that before.

28 Dec 2016, 07:11 AM	#6
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,918 Representative of: Runbox.com	lb03.runbox.com is one of our web server load balancers. - Geir

28 Dec 2016, 05:12 PM	#7
evfrson Junior Member Join Date: Oct 2015 Posts: 9	So when I logged in to webmail, it was via this load balancer and the session was recorded as being a login from this rather than from my ip ?

29 Dec 2016, 01:25 PM	#8
kservik Cornerstone of the Community Join Date: Sep 2005 Location: Oslo, Norway Posts: 545 Representative of: Runbox.com	Yes. We have changed our load balancing infrastructure recently and we have also added a facility to move over a list of users in groups (beta testers for 2FA and more) to land on the new infrastructure that uses 2FA. That is why you see changes in how things are recorded in your logins. Kim

29 Dec 2016, 07:14 PM	#9
evfrson Junior Member Join Date: Oct 2015 Posts: 9	Thanks for your replies Kim & Geir.