>>>>But a question (maybe a stupid question) - as far as SQL Server is concerned, isn't the request coming first through the web server? (I'm assuming you're trying to trace IP addresses from the outside). Can't your web app/web server capture the IP addresses in web logs?
>>>
>>>No, not in that case. We have an external source who built a .NET application using the .NET SQL Client Data Provider to query our database directly. This is still under investigation. We have not yet found who authorized this.
>>
>>Did you check http://stackoverflow.com/questions/9941074/how-to-get-the-client-ip-address-from-sql-server-2008-itself
>
>That's basically what I was implying - if he can determine the SP_ID, I figured there were ways to get the connection information from one of the system tables or DMVs based on the SP_ID.

For me the solutions in that thread return local machine and not my IP address when I run these queries.