We need IPs in the path to be checked, not lan